Network Security

We have a requirement to disable IKE aggressive mode. We are running an ASA v7 and I know how to do this ("isakmp am-disable") but I'm not sure what impact it will have on our existing VPN set-up. We are using pre-shared keys.We have remote offices ...

We are seeing syslog events that indicate some data packets are being discarded due to having more fragments than the default value of 24 on the ASA. There is a global command that allows this to be changed to 1-8200. I wonder if increasing this valu...

Hi guys,We want to connect to physical interfaces from ASA to each Nexus core, so is there any possibility to assign same rule set to both interfaces simultaneously? (a kind of zone aggregation).Regards.Jesus

Hi All, Bit of a puzzler, I've added an interface for a backup line on an ASA. The ACL for the interface is "deny ip any any". An nmap scan of the interface from the outside shows all ports *except* TCP/443 closed: [blah]$ nmap -p0-65000 <snip> Sta...

Dear All, I have a web server which is mapped with public IP and is available over internet, works fine too. My query is as follows. If the internet link fails the service won't be accessible over internet. If I have a secondary link, I can change th...

Hi All, C2811 Router         | C2960 L2 switch |      outside   | ASA -------- ASA I am running a simple topology in my laborary for testing ASA 5516-X failover and it is running active/standby failover. I have tried to power off the active ASA and ...

Can someone help me on this? I am planning to upgrade our Cisco 3850 but I do not have an experience in upgrading it.  Can you help me on this? Thank You. vrian

Hello Team, Good Day! Just wanted to seek help and assistance because from time to time our CSM stopped receiving a high priorirty alerts. We need to manually enter below command as per Cisco TAC: pdshow VmsEventServer pdterm VmsEventServer pdexec V...

Hello, My question is - is there a great difference between the OS of the ASA 5505 and the ASA 5506-X?  Are there many other people facing challenges implementing the 5506 compared to the 5505? We recently hired a company to replace a lot of our hard...

Hey everyone.  Signature update 932 was automatically applied to my IPS today at 12:16.  At 12:17, I started to get a ton of Adobe Acrobat Reader Memory Corruption hits on signature 7615.  I'm assuming this is a bug.  Is anyone else experiencing the ...

Guys, I am going to procure CISCO 5508-X and 5516-X with firepower module. Purpose of procurement to have firewall functionalities and IPS functionality through source power. Along with that i need a centralized manager to manage these device. I am ...

I have an inside host ip and an outside host ip, i have a 3560 switch connected to a 2960 transmittor switch which is the inside network. Which is than connected to a 5520 ASA Firewall. For the outside network I have a 3560 outside switch connecting ...

Recently we deployed new 5515-X ASAs.  The firewall and the context were added to the Cisco Security Manager 4.7 client.  After attempting to add the IPS sw-module, I get the following error message: Failed to communicate with device.  Cause: Getting...