Network Security

Hi, I have a couple of users configured in the DMZ zone in my office. These users want to access to a web application which is hosted in our data centre.The web application is hosted in inside zone of the data centre.We have a VPN tunnel terminated ...

Hello Cisco Security Community, I come to you for your help in understanding the code differences between ASA 8.3(1) and 9.1(1) code. We are moving from the 5520 ASA's to our new 5515-X ASA's. One of our sites is running ASA 8.3(1) (which I know is ...

folks I'm looking for your views on implementing ASA clustering (spanned etherchannel) across 2 data centres I have one ISP with a link into each site my plan is to have a single appliance in each site with a dedicated CCL 10Gb link between the firew...

Hello, My company is currently running a Cisco ASA 5510.  We have been told by our 3rd party point of sale vendor that they are having issues syncing their database and server because they need TCP port 1433 & UDP port 1434 opened on the firewall.  ...

i am using cisco anyconnect with IKEv2 (ios 9.5,anyconnect 4.2) .this configuration will support hotscan and CSD.

While the Firesight IPS sensor loads a rule update....snort restarts in order to load new configuration. However, when this happens, the IPS sensor drops multiple packets (about 20). Anyone know a way around this? The IPS is set to "fail-open" from t...

I've dug in some in the admin console and browsed the user guide... But it appears at first glance the reporting will not be granular to the point of dates, times, hits, and url for any specific user. A true user browsing report in detail like a prod...

Hi all, I'm trying to upgrade the Sourcefire 3D defese center 3D and the cisco network sensor from the 5.3.1.6 to the 5.4.0-763 but i failed.Is there any suggestion please ?

I noticed that I was only carrying roughly 1 days worth of connection events in Firesight and increased the max retention from 1 to 10 million. I will have to wait and see but simple math would tell me that will allow me to store 10 days worth of dat...

I have to demonstrate  IPS signature with drop action in ASA AFR. Can anyone tell me the signature for large icmp packet size? Is it enabled by default?

I just configured an nmap scan in the FireSight Management server (version 6.0.0.1) and it worked well, with one issue...there's at least one firewall between the FireSight server and the networks I would like to schedule nmap scans against, so sourc...