Network Security

So I have started playing around with NMAP on Sourcefire 5.4.1.3 since I use it for other security related events.  What I have found is that it seems to be terrible at detecting the OS type and version. For windows servers it seems to be always inco...

We have bought a Cisco ASA 5512x recently. Now to use its services we need Firesight managment system. Here i would like to know where should i deploy the Firesight managment system i.e should do it in the LAN or the server that is present in datacen...

We send Discovery Events, Intrusion Event Packet Data, Intrusion Events & Intrusion Event Extra Data using the estreamer client into our SIEM tool.I cannot find the "Original Client IP" address field in my SIEM. Does the streamer client actually send...

I setup a simple static route on a 5505 ASA.  The internal network is a 172.16.1.0 /24 and I needed to route to another network 172.27.199.0 using 172.16.1.3 as the gateway.   Simple enough?  router# show route Codes: C - connected, S - static, I - I...

Currently I have a Cisco ASA 5510 with older images on it. I want to get my ASA updated to a more current OS. I want to go from : asa825-k8.bin - Firewall Image asdm-621.bin To: asa941-203-smp-k8.bin asdm-751-90.bin If I tftp the images onto the A...

Hi Team,               Could you please provide the syslog message ids which are related to all configuration change.Like one user is making modifying or changing the configuration of firewall(FWSM) i.e. creating policy or updating. Please help me on...

Dear All, has any one tried to install firesight vmware file with (.ovf) extension not (.vmdk) extension and worked properly?!!because i installed (.ovf) file but i cannot perform any network discovery or monitoring users even if Firesight license is...

We got following error message when login into IPS over IDM after updated below given signature.  Error: errSystemError-ct-sensorApp.429 not responding IPS-sig-S891-req-E4.pkg  IPS version:  IPS 4260 VER 7.0(4)E4 Please assist to resolve the issue

Hello I have FirePower configured to allow or deny Internet access to users That belong to different Active Directory Groups, now I like to show difference bloks pages to diferents groups, it is possible only see only one personalization. Best Rega...

Short story is... we have an ASA 5515X firewall, 3 Mbps (fiber symetric) internet bandwidth, 30 clients, but when someone download something big, the rest of the clients lost internet access. How can i resolve this. Any example or guide will be highl...

Hi, Can you please advise what emweb/https process does? sh proc cpu     MAXHOG             NUMHOG             LASTHOG             Process--------------     ---------------     ---------------       ---------       150                  8             ...

Hi, Can you advise if packets are dropped from the ASA with the log message below? How can we get the source IP performing the scanning below? TIA PF %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 6 per second, max configured ...

Does anyone know what kind of MAC address is this? MAC=1c:b7:2c:c3:0f:20:00:01:5c:77:9e:46:08:00