Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Question about Cisco Firepower NGIPSv on the UCSE blades

Hello all. My customer would like to purchase UCSE blades on their ISRG2 4431 routers for their branch offices. They would like to run the Firepower NGIPSv VMs on it. My question is - Is there a way that the NGIPSv can drop traffic inline (IPS mode) ...

Knowledgebase for Sourcefire (Firesight) issues

The Sourecfire website used to have a knowledgebase where I could go look up issues that other individuals encountered and the resolution for them. Does Cisco have something similar to that? I can't seem to find it on the support website and I don'...

Cisco ASA SIP Inspection Issues

I'm having issues with getting SIP and RTP traffic through a Cisco ASA with NAT enabled. Diagram of issue: http://i.imgur.com/Ymwl7Xm.jpgNow, when we enable the SIP inspection on the ASA, the SIP messages are generated by "SIP CLIENT" and when genera...

If Opportunity Makes a Thief, What Stops one? | SecurityWeek.com

How do you make sure you’re selecting an NGFW that reduces opportunities for thieves across the full attack continuum – before, during, and after an attack?Marc Solomon, VP of Cisco Security Marketing has some thoughts on this topic.Read the Security...

ASA 8 admin login/logout syslog msg

Is it possible to configure ASA to generate syslog msg when admin user log in and log out=br

Security Design Question

Hello, Before I say something out of turn can anyone tell me a valid reason that someone would assign a public IP address to an interface on a 6800 that is a core switch? SSH is also open from the outside to any IP address. True you have to authen...

ASA Firewall MGMT interface Setup and Access Issue

I have SETUP ASA 5525-X firewalls in a active standby HA pair. It's inside interface (Gi0/0) is terminated on L3 switch (vlan30), firewall will use L3 switch to reach all the inside segments. On the inside network we have vlan's for DATA (vlan10), MG...

ASA 5506-X Easy VPN

Does anyone know if they removed the easy vpn client for the ASA 5506-X. I can make it as a server but not a client or is there a replacement?

Security context admin via shared interface

Hi, we just set a couple of ASA 5520 in security context mode, with : - system context, - admin context, - 2 production contexts. So far so good. However, we can't poll via snmp thru the admin context the interfaces that have been configured into the...

Resolved! Boot image - Best practice on ASA

Hello, I have two image asa842-k8.bin and asa825-k8.bin. on my ASA But in the conf, it only have this commande : boot system disk0:/asa842-k8.bin Is the best practice to put the two boot image in the running-config or if the image in the running_co...

CDA and ASA failover guidelines

Hello, in a failover active/standby ASA configuration do I have to configure ASA standby on CDA ? It seems to be confirmed by doc: http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/aaa_idfw.html in fa...

Cisco asa group port redirect

Hello, i need to redirect (port forward) group ports from outside to inside IP . ASA ver 8.2. I know how to configure nat rules to redirect group ports, but i need to open this group ports on outside interface.

Infinite reload of STANDBY FWSM unit due to incorrect configuration replication from ACTIVE FWSM unit.

Dear Cisco Experts and Cisco experienced persons!This is a failover problem. We have A/S FWSM failover configuration (ver. 4.0.6 each)This problem suddenly appears when our ACTIVE unit configuration reached 125K in size. STANDBY can't load this confi...

Resolved! Object NAT not translating

So, I have a range of public address's .104 /29 my outside interface is 106 on the ASA with the next hop as 105. i have a SIP gateway server and have created object NAT for it, I did this in the ADSM, so the source address is 192.168.0.100 and the NA...