Network Security

We have migrated site-to-site VPN from Router to ASA. There was an issue with Exchange mail between sites and it was resolved by removing "inspect esmtp" . Now some users are reporting random search issue with the inbox. Sometimes the search result f...

Hi all,I’m having a problem to save Cisco ASA configuration in GNS3 via write memory command.    ciscoasa(config)# wr mem   Building configuration…   Cryptochecksum: c066a7ab b5b9071e bb5ee1f6 2d93be53   %Error copying system:/running-config (Not eno...

Hi.I'm trying to build a firewall and wanted to use the "ip port-map user-xxx ..." command to make a custom protocol that I could then use in protocol statement insice a class-map type inspect.Is this yet another thing missing from IOS XE, like the l...

I have a question about an issue with LWP and the Rapid7 Connector.Here is a snippet of whats going on:Script Output:<omitted>:[/opt/rapid7/nexpose/sourcefire_connector]# ./rapid7_connector.pl  -csvfile=output.txt -plugininfo=InputPlugins/Nexpose.yam...

I enabled a few DNS blacklist snort rules along with creating my own. None of them will trigger an alert/intrusion event. I verifed that the rules are enabled and everything. I took these same rules and applied them to open source snort and they do t...

Hi, We are purchasing a Cisco 5525-x to take advantage of a shared site's 300MB line, but have two other sites that use an existing 5505 with 8.2x IOS version.  Is there a way to find out if we can properly connect the 5525-x to our existing 5505 8....

We are looking to upgrade our ASA from the Legacy IDS/IPS to FirePOWER(need to purchase SSD), we are using the botnet license, would going to FirePOWER make the botnet redundant as sourcefire/firepower does the same job?We are looking to purchase 2 n...

Hi, I replaced a Cisco 881 router with an ASA5506 firewall on a small network and now the users can't use their softphone application. The softphone is locally installed application on the PC and it connects to a IP/phone service on Internet.It was w...

Hi All, I am not able to ping the outside interface IP from internet. But I can ping from the ASA to internet. FW# ping 4.2.2.2 re 1Type escape sequence to abort.Sending 1, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:!Success rate is 100 per...

Hi All, First of all I really hope to find someone who is able to help me. We have in our (small) office a CISCO ASA 5505 but it died and I have ordered a new ASA device. As we had a template for the 5505 Series I tried to order a 5505 and use the te...

Networking newbie here...maybe even a newbie newbie. Anyway we just purchased a Cisco ASA5505, V15 firewall for our non-profit literacy center.  We run W7 on our four office computers and on our 10 student computers.  The office computers share info ...

Hello - I am trying to locate additional information regarding sid 32621.  alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"MALWARE-CNC Win.Trojan.Regin outbound connection"; flow:to_server,established; content:" TW="; fast_pattern:only; c...

Hello everyone. I am looking for a way to turn off a rule for one specific source IP address. I have a customer whose Symantec Proxy server is triggering the "MALWARE-CNC Win.Trojan.Cidox variant outbound connection" rule on trafffic bound for Symant...

I have a new ASA 5506-x and after installing my publicly trusted SSL the HTTPS portal still presents the self signed cert.  After researching I found a bug (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuw02001/?referring_site=bugquickviewredir) t...