Network Security

Dear All, i have a problem in DNS Forwarder DNS server forwarder is not resolving 8.8.8.8, 4.2.2.2 or any global IP, DNS server is inside network, internet traffic is going through proxy which is in DMZ,DMZ interface=> rule "source (Proxy IP- 10.1.10...

Hi, I have a Cisco 5506X ASA with firepower fully licensed. I have URL filtering category Pornography/Adult any reputation set to block. Now some porn websites get blocked but some don't. When I'm in the ASDM looking at the monitoring of live connec...

Hello, I have a scenario where a Server A (IP x.x.x.x) on the outside interface of ASA (5525x IOS 9.6) is configured to send TCP and UDP traffic to Server B (IP y.y.y.y) on the inside. Using static routes I am able to successfully test connectivity ...

Dear All, kindly tell me how can i use ACL for network filtering on all uplink and switch ports, below observation and recommendation from security officer  Observation During our review we have noted that 62 network interfaces on CSW01 had no networ...

Hello, I'd like to ask you what is necessary to configure for processing industry standard X.224 (ISO 8073) protocol.We have trouble with this type of communication protocol and scenario is for each tcp flow like this:- TCP is established between cli...

Hello, We are experiencing problems with the timeout connections. Several connections are not being closed in the timeout period, causing an overflow occurs the number of connections supported by the equipment. Note that UDP is TIMEOUT in 2 minutes ...

Currently we are in a situation where we need to configure encryption domain as /32 hosts (actually many). and the no of VPN can reach up to 100. The box is running in context mode with 3 contexts.Current iOS version= 9.4We need to know the threshol...

I am very rusty with working with the ASA and I've never gotten it to work with a CUBE SIP Gateway before. What I have is a CUBE gateway that was terminated to a SIP provider (Nextiva).  When my router on my home lab was public facing everything wor...

Hi,   Does anyone know the real performance numbers for the new FP4100 with all features enabled? The data sheet only shows sizing throughput for AVC or IPS, but there are no numbers for AVC+IPS, AVC+IPS+AMP or AVC+IPS+AMP+URL? Will this have the sam...

Hi guys. We have a strange issue. Periodically we lose remote access to both ASDM and SSH on our Cisco ASA 5515X Firewall. The code version is 9.1(2) and the ASDM 7.1(3). Normally I would assume it to be an ASDM issue and have solved similar by chang...

Hello ! We have physical sensors and want to use ssl inspection for users traffic. When we deploy this function we have (almost on any site) - unknown cipher error. From SSL workflow we know that cipher suite selected by SERVER HELLO which in our cas...

We would like to block amazon's video streaming service but not the rest of the site. Is there a way to do this? We have tried the existing filters but none of them seem to block only Amazon Video. Any suggestions? Thanks

Hello, i bought a new ASA5506-x with security plus license and a 3y tamc license from a Internet reseller. Unfortunately the asa is installed with old Software (9.5.2) so tried to download the latest version 9.6.1. I payed ~1200 Eur for the little b...

Hi all, In the diagram, I'm going to build connection from PC1 to PC2 via 2 VPN tunnels. Now, I observed the traffic in ASA2 > VPN2 seems normal (i.e. encaps and decaps are accumulated) access-list outside_cryptomap_440 extended permit ip 10.130.107....