Network Security

Hi, in relation to this thread (https://supportforums.cisco.com/discussion/13067906/recommendation-stable-asa-software-firepower-601), I would again ask for a current software version recommend for a Cisco ASA. Currently we are using 9.1(7)4 but the...

Hello Experts, I want to disable/block the command (show running-configuration)  for some specific users who are accessing my Cisco ASA.  Can anyone give me instruction how to do it , please.   I dont have ACS or any radius server,  i want to do it ...

Hi everyone. I am attempting to implement PAT + NAT exemption on our ASA on a setup similar to the one described here: http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/nat_overview.html#92034 The main dif...

Good day, I need to get a rack mountable server to support the management server for the Cisco ASA 5508-X FIREWPOWER devices and all the VM licenses for it.  A server that I have in mind is the following: http://shop.lenovo.com/us/en/systems/servers/...

Hi, How to send the connection event with "block" action only to Firesight management center, not all connection event? Best Regards, Jackson Ku

Hi folks ,  I am planning to make asa 5545-x cluster.So i have some question. Question is : 1.Which mode(spanned or invidivual) should i use ?2.What is your recommendation ? I implemeneted as A/S before. But there was high CPU usage issue cause of C...

My question is : can we still use the 5500 ASA-s even after the EOL and what are the risks, and what we would want to replace e.g 5505 and 5510 with ? anything build in with IPS like the next X generation? 

Defense Center VM is deployed on ESXI 5.5. 4 CPUs, 8GBs memory. After uploading the 5.4.1.6 patch tried to install and it fails while attempting to run the following script: script 450_prior_updates/100_run_prior_dates didn't run I looked in the sysl...

i have my rules setup in a standard way where certain categories are allowed like news and media e.g. cnn and others like web advertisement and CDN are blocked. the problem i have is because websites like cnn.com make calls to URLs in the blocked ca...

Hi folks! After a few interactions with FirePOWER, Cisco TAC, Cisco LIve!  Lunch and Learn, and "The Hub" -  I find myself feeling like still searching for good documentation for a few "Best practices" that would apply to many scenarios. When I hav...

Hello to everybody, I have a question about the updates on Device managed and Defense Center. If I schedule the update of VDB, Snort Rules and Geolocation IP Address, on Primary Defense Center; I have to schedule in Secondary Defense Center too? Or ...