Network Security

Currently we are in a situation where we need to configure encryption domain as /32 hosts (actually many). and the no of VPN can reach up to 100. The box is running in context mode with 3 contexts.Current iOS version= 9.4We need to know the threshol...

I am very rusty with working with the ASA and I've never gotten it to work with a CUBE SIP Gateway before. What I have is a CUBE gateway that was terminated to a SIP provider (Nextiva).  When my router on my home lab was public facing everything wor...

Hi,   Does anyone know the real performance numbers for the new FP4100 with all features enabled? The data sheet only shows sizing throughput for AVC or IPS, but there are no numbers for AVC+IPS, AVC+IPS+AMP or AVC+IPS+AMP+URL? Will this have the sam...

Hi guys. We have a strange issue. Periodically we lose remote access to both ASDM and SSH on our Cisco ASA 5515X Firewall. The code version is 9.1(2) and the ASDM 7.1(3). Normally I would assume it to be an ASDM issue and have solved similar by chang...

Hello ! We have physical sensors and want to use ssl inspection for users traffic. When we deploy this function we have (almost on any site) - unknown cipher error. From SSL workflow we know that cipher suite selected by SERVER HELLO which in our cas...

We would like to block amazon's video streaming service but not the rest of the site. Is there a way to do this? We have tried the existing filters but none of them seem to block only Amazon Video. Any suggestions? Thanks

Hello, i bought a new ASA5506-x with security plus license and a 3y tamc license from a Internet reseller. Unfortunately the asa is installed with old Software (9.5.2) so tried to download the latest version 9.6.1. I payed ~1200 Eur for the little b...

Hi all, In the diagram, I'm going to build connection from PC1 to PC2 via 2 VPN tunnels. Now, I observed the traffic in ASA2 > VPN2 seems normal (i.e. encaps and decaps are accumulated) access-list outside_cryptomap_440 extended permit ip 10.130.107....

I seem to have trouble with URL filtering not working. Using the categories to block traffic I have selected all gambling and social media to test blocking works fine. Default action is Trust All Traffic and i have a rule blocking all inside to outs...

Hi guys, My current configuration which I need to validate is an ASA port-channeled to the core.  I am placing the appliance Inline.  I have 1 inline set with 2 interface pairs.  One set of interface pairs are for the Appliance towards the firewall ...

Dear Sir,                  My Static NAT rule is not working , When my pc ( 192.168.10.33 ) go to destination outside ip is not use 192.168.200.11 . ASA is translate with range 192.168.200.20 192.168.200.200 . So I think My Static NAT Rule is not wo...

Hi, We have Cisco ISE version 1.4.0.253. We're trying to install user certificate via client provisioning by using  WinSPWizard 1.0.0.46. Our tests worked well on windows 7 (64 bits) , but we are not able to make it work with windows 8.1 (64 bits) !...