Network Security

Hi Guys, Good Day! Just want to know if you also have an issue regarding the ASA not performing routing but instead using its NAT configuration for it to route the traffic. I have a NAT from DMZ to ISP with any any in its criteria however, we already...

Hi, We are having a discussion here in the office about whether the 5508-X can support the above three feature's simultaneously ?, I think it's probably a bit too light for this but cannot find any documentation to confirm or deny this. Regards S...

Anyone else run into this?  I've got a new FireSIGHT deployment and everything appears to be working fine, but I can't get this update to apply regardless of whether I download from SourceFire or manually try to update from file...Here's the error in...

Hello, I have a need to temporarily route inside traffic out a management0/0 interface on a Cisco ASA. ASA5525 Version 9.1(6)10. Basically there is a network off the management interface that inside users need to get to. So if I do a "route managemen...

Hi, can anybody help me please?I have Cisco ASA 5516-X. It is connected to Virtual Defense Center.How there is an updating through VDC? In System-Updates I see many different updates, such as: Sourcefire Vulnerability And Fingerprint Database Updates...

Hi, I have a couple of users configured in the DMZ zone in my office. These users want to access to a web application which is hosted in our data centre.The web application is hosted in inside zone of the data centre.We have a VPN tunnel terminated ...

Hello Cisco Security Community, I come to you for your help in understanding the code differences between ASA 8.3(1) and 9.1(1) code. We are moving from the 5520 ASA's to our new 5515-X ASA's. One of our sites is running ASA 8.3(1) (which I know is ...

folks I'm looking for your views on implementing ASA clustering (spanned etherchannel) across 2 data centres I have one ISP with a link into each site my plan is to have a single appliance in each site with a dedicated CCL 10Gb link between the firew...

Hello, My company is currently running a Cisco ASA 5510.  We have been told by our 3rd party point of sale vendor that they are having issues syncing their database and server because they need TCP port 1433 & UDP port 1434 opened on the firewall.  ...

i am using cisco anyconnect with IKEv2 (ios 9.5,anyconnect 4.2) .this configuration will support hotscan and CSD.

While the Firesight IPS sensor loads a rule update....snort restarts in order to load new configuration. However, when this happens, the IPS sensor drops multiple packets (about 20). Anyone know a way around this? The IPS is set to "fail-open" from t...

I've dug in some in the admin console and browsed the user guide... But it appears at first glance the reporting will not be granular to the point of dates, times, hits, and url for any specific user. A true user browsing report in detail like a prod...