Network Security

Hi, I have an issue like everyday for a particular period of time my internet  bandwidth getting full. Can i get an insight  If i capture the packet from asa and analyze ?. During packet capturing  asa performance will degrade ?  I tried to capture  ...

Hello Folks i am having ASA 5520 with 512 DRAM which use for l2l vpn purpose only , is it safe to upgrade from 8.0.4 to 8.2.4 or 8.2.5 do i required memory upgrade as i seen some doc saying memory issue can occurred after the upgrade but i didn't f...

Hi, I think I'm experiencing asymmetric routing. how can we prove/verify that we have asymmetric routing issues? (SAMPLE CONF) object network PUB1 host 2.2.0.3 object network RT1 host 10.0.0.3 nat (inside,outside) source static RT1 PUB1 object netwo...

Currently, our ASA 5512 is configured to route outbound traffic to the Internet and I need to be able to configure an additional uplink to a dedicated connection.  I have been using NAT for inbound access to servers over the current uplink.  Now, I n...

We have migrated site-to-site VPN from Router to ASA. There was an issue with Exchange mail between sites and it was resolved by removing "inspect esmtp" . Now some users are reporting random search issue with the inbox. Sometimes the search result f...

Hi all,I’m having a problem to save Cisco ASA configuration in GNS3 via write memory command.    ciscoasa(config)# wr mem   Building configuration…   Cryptochecksum: c066a7ab b5b9071e bb5ee1f6 2d93be53   %Error copying system:/running-config (Not eno...

Hi.I'm trying to build a firewall and wanted to use the "ip port-map user-xxx ..." command to make a custom protocol that I could then use in protocol statement insice a class-map type inspect.Is this yet another thing missing from IOS XE, like the l...

I have a question about an issue with LWP and the Rapid7 Connector.Here is a snippet of whats going on:Script Output:<omitted>:[/opt/rapid7/nexpose/sourcefire_connector]# ./rapid7_connector.pl  -csvfile=output.txt -plugininfo=InputPlugins/Nexpose.yam...

I enabled a few DNS blacklist snort rules along with creating my own. None of them will trigger an alert/intrusion event. I verifed that the rules are enabled and everything. I took these same rules and applied them to open source snort and they do t...

Hi, We are purchasing a Cisco 5525-x to take advantage of a shared site's 300MB line, but have two other sites that use an existing 5505 with 8.2x IOS version.  Is there a way to find out if we can properly connect the 5525-x to our existing 5505 8....

We are looking to upgrade our ASA from the Legacy IDS/IPS to FirePOWER(need to purchase SSD), we are using the botnet license, would going to FirePOWER make the botnet redundant as sourcefire/firepower does the same job?We are looking to purchase 2 n...

Hi, I replaced a Cisco 881 router with an ASA5506 firewall on a small network and now the users can't use their softphone application. The softphone is locally installed application on the PC and it connects to a IP/phone service on Internet.It was w...

Hi All, I am not able to ping the outside interface IP from internet. But I can ping from the ASA to internet. FW# ping 4.2.2.2 re 1Type escape sequence to abort.Sending 1, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:!Success rate is 100 per...

Hi All, First of all I really hope to find someone who is able to help me. We have in our (small) office a CISCO ASA 5505 but it died and I have ordered a new ASA device. As we had a template for the 5505 Series I tried to order a 5505 and use the te...

Networking newbie here...maybe even a newbie newbie. Anyway we just purchased a Cisco ASA5505, V15 firewall for our non-profit literacy center.  We run W7 on our four office computers and on our 10 student computers.  The office computers share info ...