Network Security

Hi, I'm trying to get my clients from another site access to the secure web server in my interior network. Below are the object groups and access lists i have configured on the ASA where the web server is attached to. ! ! object network asa_inside_ad...

Does the ASA 5506-X base license still only support the 2 interfaces and a limited DMZ like the base 5505 did? It's very odd to remove switch ports that can participate in the same vlans, and yet they create a traditional ASA with 8 gig ports when yo...

Hello Team, We need your expertise on IPS. We are planning to upgrade our IPS to 7.1(8)E4, and we would like to know what is the correct software to be downloaded. Current Software; Model:        SW Version: -----------    ----------------- ASA-SSM-2...

We are currently using sensor (5.2.0.4) . We have configured syslog to server 1 through port 514 and snmp to server 2 through ports 161 and 162. While capturing the firewall traffic we can able to see traffic generating from the sensors to server2 (S...

need a help in ASA 5510 ASDM  found out this error  Exception in thread "AWT-EventQueue-0" java.lang.ClassCastException: sun.security.ssl.X509TrustManagerImpl cannot be cast to com.sun.net.ssl.internal.ssl.X509ExtendedTrustManager at com.sun.deploy.s...

ASA5510 v8.3 - servers on the inside network are accessible from outside on select ports - hosts on the dmz network can access anything on the Internet - hosts on the dmz cannot access the servers on the inside network by using their public names Her...

i need to know what is the function of this FS-VMW-SW-K9 and what the difffrence between FS-VMW-SW-K9 and  FS-VMW-2-SW-K9 ?   thanks a lopt

Hi Guys, I ran into discover that ASA5510 that we are using for guest wifi access has only two interfaces are capable of 1Gb and interface Ethernet0/2 and Ethernet0/3 are 10/100 only. Is there anyway that can be change with IOS upgrade on ASA5510 to ...

Hi , What will happen if license will expire on ASA5545-IPS Will it stop running? Will it stop filtering even with current signature sets? or will it only stop getting new signatures? Regards, Jhun

hello, is it normal to find two identic NAT  translations for a unqiue static nat statement. ? HOSTNAME# sh runn | i INSIDE_nat_static_syntesysaccess-list INSIDE_nat_static_syntesys_1 extended permit ip host FRCOCAT object-group Grp_Net_Syntesys stat...

I am playing around with a 5506-X with SourceFire in a lab. I have enabled SSL decryption with "Decrypt-Resign" and it seems to be working properly.  Unfortunately, for some reason, when I access Google from chrome, it doesn't seem to work and it sti...