Network Security

All, Several of my FirePOWER sensors (7020 and 7030's running 5.3.0.8) are alerting for time sync.  The FireSIGHT is syncing fine with the assigned NTP server, but the FirePOWER sensors do not sync.  I have gone through this document Troubleshoot Iss...

Hi, We have a scenario with three ASA: one 5515-X with FirePOWER in the HQ, two 5505 in each branch, and IPsec VPN tunnels from both 5505 to the 5515-X. We are forwarding all the traffic from the branches to the VPN tunnels (vpn acl is from branch lo...

Hello,I need to get a file from a sensor but there are several firewalls in between FMC and Sensors and the only open port is 8305 (no ssh).  Could I use the sftunnel to transport that file from sensor to FMC?Has somebody face it before or has any id...

We have a requirement to disable IKE aggressive mode. We are running an ASA v7 and I know how to do this ("isakmp am-disable") but I'm not sure what impact it will have on our existing VPN set-up. We are using pre-shared keys.We have remote offices (...

We are seeing syslog events that indicate some data packets are being discarded due to having more fragments than the default value of 24 on the ASA. There is a global command that allows this to be changed to 1-8200. I wonder if increasing this valu...

Hi guys,We want to connect to physical interfaces from ASA to each Nexus core, so is there any possibility to assign same rule set to both interfaces simultaneously? (a kind of zone aggregation).Regards.Jesus

Hi All, Bit of a puzzler, I've added an interface for a backup line on an ASA. The ACL for the interface is "deny ip any any". An nmap scan of the interface from the outside shows all ports *except* TCP/443 closed: [blah]$ nmap -p0-65000 <snip> Start...

Dear All, I have a web server which is mapped with public IP and is available over internet, works fine too. My query is as follows. If the internet link fails the service won't be accessible over internet. If I have a secondary link, I can change th...

Hi All, C2811 Router         | C2960 L2 switch |      outside   | ASA -------- ASA I am running a simple topology in my laborary for testing ASA 5516-X failover and it is running active/standby failover. I have tried to power off the active ASA and t...

Can someone help me on this? I am planning to upgrade our Cisco 3850 but I do not have an experience in upgrading it.  Can you help me on this? Thank You. vrian

Hello Team, Good Day! Just wanted to seek help and assistance because from time to time our CSM stopped receiving a high priorirty alerts. We need to manually enter below command as per Cisco TAC: pdshow VmsEventServer pdterm VmsEventServer pdexec Vm...

Hello, My question is - is there a great difference between the OS of the ASA 5505 and the ASA 5506-X?  Are there many other people facing challenges implementing the 5506 compared to the 5505? We recently hired a company to replace a lot of our hard...

Hey everyone.  Signature update 932 was automatically applied to my IPS today at 12:16.  At 12:17, I started to get a ton of Adobe Acrobat Reader Memory Corruption hits on signature 7615.  I'm assuming this is a bug.  Is anyone else experiencing the ...