Network Security

My I am seeing far more MAC Hosts than IP hosts?  I have two ASAs with FirePOWER at the DMZ.  For example, I see HOST IPs 52, and Host (MAC) 3,237.

Is it advisable to terminate shared MPLS link on firewall? what are the technical challenges would occur? because this firewall already acting as perimeter firewall ( in this Anyconnect, S2S VPN, and it does IPS functionality as well. Regards, Sanka...

Hi I need help with doing a port forward for remote desktop with asa5505 9.1.1 and asdm 7.1.1 i could have done this with the previous versions of asdm but now it even more confusing

Hello All, New to sourcefire and an having an issue and could use some help.  Have been getting emails all morning about intrusions and have not been able to track them down or get any info on them.  I think they are being blocked ( dropped) but want...

Hi, I am running a Cisco ASA5505 firewall with software version 8.2(5) and unlimited hosts license. It worked fine for years but all of a sudden it seems to stop forwarding packets. The GUI and CLI can still be reached. No errors in the logging, it...

In cisco ASA firepower 6. GroupA is a set of IP addresses , I want to block 2 URL categories and then the rest should be allowed. I have put a default last rule as deny all. Now for this do I need to create 2 policiesPolicy1 - Inside to Outside, Gro...

I use the command "configure manager add" to add the device in Sourcefire. After that, i see the error" could not establish a connection with sensor. Make sure the registration keys match, that the software version are compatible, and that network is...

When we have enabled Unicast RPF on Cisco ASA, The RPF drops on the outside interface keeps on increasing and we are getting many alerts. I understand that it's an expected behavior, So how we can find the logs filtered for this particular drops or a...

Hi there, I'm attempting to set up ACLs on my VLANs to block access to all other VLANs but allow traffic to the servers and the internet. As soon as I apply the ACL to the SVI it stops new connections i.e. they can't get an IP address from the DHCP s...

I'm getting ready to upgrade an old 5505 this weekend. Looking to verify the upgrade path I've researched. Current ASA/ASDM level is 8.3.1/6.3.1. Upgrade doc shows max level of 9.2.4/7.4.3+. I'm planning on using the ASDM upgrade wizard. I've gathere...

After Upgrade Firepower from version 5 to 6 too many problems. I suggest who wants to upgrade to version 6 to wait until some minor update release. Some problems: 1. Snort crash if SMB File analysis is enabled; 2. Even if you disable inspect on ASA (...

I have attempted to open three ports on our firewall.  Only when I test the ports using an open port checker tool online, I get a response that the ports are closed.  I'm not understanding why these ports are not getting hits or showing open.  Can so...

I have seen the threads on the JUNOS to ASA conversion topics from a few years ago. And now i am in the same spot i need to migrate away from Juniper SRX (thankfully) to Cisco ASA. Does anyone know of any tools out there? Python anything that will as...