Network Security

Hi All, I'm having issues with this particular traffic flow and see multiple connections from various source ports to the same high order port TCP/49155 being denied whilst using hyper-v manager through the firewall. Bi-directional AD traffic works f...

Hi, I am running a Cisco 5505 firewall 9.2(4) and have VPN users connecting in using the old Cisco VPN client v5.0.07.0290. When these VPN users login is there a way to include these users VPN login and logout information in the syslog? BTW the syslo...

Hi, I am setting up ASA 5525-X for Client to Site VPN. I have users on old RADIUS server which I want to blow away. Idea is to migrate users and passwords from RADIUS (old linux box) to ASA. Is it possible to migrate password hashes? Hashes are in th...

Hey folks. I could use a hand.  I'm trying to setup a VPN tunnel for monitoring from a remote partner.  I'm getting the Tunnel established, but I'm having a conceptual problem.  I have internal LAN addresses that will be monitored from the remote par...

Hi all, I am trying to migrate our PIX firewall to ASA.  I am very new to the firewall domain since my skills are mainly for routing and switching... I have attached the topology and the configs of the PIX and configs of the ASA when converted.  The ...

Hello All. This may be a re post, but is there any reason someone may add this many images to the bootvar?  Would it be due to the way different version(s) of the ASA IOS interpret NATing? or even access lists? I can see having one extra in the strin...

Guys We have a Rockwell FactoryTalk SCADA system that uses DCOM as a communication protocol to talk to clients. The problem now is that DCOM requires port 1024-65535 to be opened on the firewall? (unless I have been told the wrong information?) Is th...

Hi, just wondering if anyone can help before I raise a TAC I have just updated Firepower Management Center to 6.0.0.1 and now trying to install Fingerprint (4.5.0-261), Geo DB (2016-02-24-001) and Rules (2016-03-030002) updates and I get an error com...

Hello! We are beginning our deployment of Cisco ISE and not sure how to proceed on our domain for ISE.  Should we use *.ise.company.com or just *.company.com?  We understand the security advantages of using ise.company.com, but it is worth any issues...

I have been piloting a Cisco Meraki MX64 device for quite sometime and we have been looking at it specifically to see what data can get out of it for SIEM integration. Per the documentation that I've found and working with Cisco  we should be able to...

Hi Guys, I have Firepower 8350 device with Ten Gi Sensor module (s1p1,s1p2 , s2p1,s2p2,s3,p3)  , but default s1p1 is enable , i'm trying to enable to other sensor interface , Didn't find the option to enable it - Firepower 8350 is managed by Firesigh...

Hi all, I'm trying to configure an IPsec connection which excludes some traffic from being encripted using its dscp value. Apparently it's as easy as configuring its dscp value with a deny statement on the crypto ACL , but it's not working. Sometimes...