Network Security

Hi,We have a 5540 firewall, when we push up a firewall rule one step we get a message from ASDM that this cannot be done. See file included?Why is this, I did never see this problem. We use a lot of ASA's including 5550 and 5580's.ASA image is 8.4(1)...

Hello, I cannot remove the Maximum Other VPN Sessions on my ASA. It i fixed to 250 but my license is to 2500 Other VPN Peers. When I remove with the commande :  no max-other-vpn-limit 250 It is the Ipsec  VPN site to site who are impacted. But my req...

Hi,I was wondering with a single ASA is there a way to have multiple contexts use a dual ISP? For example context A has an inside and an outside(A) with another outside(B) for failover. Context B has and inside, and outside (B) and another outside (A...

So just to set a correct picture, we have the firewall running and can create a single port PAT translation that works just as expected. .What we can't seem to get right is the way to open a range. We are replacing an older linksys device and this on...

Hello all. My customer would like to purchase UCSE blades on their ISRG2 4431 routers for their branch offices. They would like to run the Firepower NGIPSv VMs on it. My question is - Is there a way that the NGIPSv can drop traffic inline (IPS mode) ...

The Sourecfire website used to have a knowledgebase where I could go look up issues that other individuals encountered and the resolution for them.  Does Cisco have something similar to that?  I can't seem to find it on the support website and I don'...

I'm having issues with getting SIP and RTP traffic through a Cisco ASA with NAT enabled. Diagram of issue: http://i.imgur.com/Ymwl7Xm.jpgNow, when we enable the SIP inspection on the ASA, the SIP messages are generated by "SIP CLIENT" and when genera...

How do you make sure you’re selecting an NGFW that reduces opportunities for thieves across the full attack continuum – before, during, and after an attack?Marc Solomon, VP of Cisco Security Marketing has some thoughts on this topic.Read the Security...

Is it possible to configure ASA to generate syslog msg when admin user log in and log out=br

Hello, Before I say something out of turn can anyone tell me a valid reason that someone would assign a public IP address to an interface on a 6800 that is a core switch? SSH is also open from the outside to any IP address.  True you have to authenti...

I have SETUP ASA 5525-X firewalls in a active standby HA pair. It's inside interface (Gi0/0) is terminated on L3 switch (vlan30), firewall will use L3 switch to reach all the inside segments. On the inside network we have vlan's for DATA (vlan10), MG...

Does anyone know if they removed the easy vpn client for the ASA 5506-X. I can make it as a server but not a client or is there a replacement?

Hi, we just set a couple of ASA 5520 in security context mode, with : - system context, - admin context, - 2 production contexts. So far so good. However, we can't poll via snmp thru the admin context the interfaces that have been configured into the...

Hello, in a failover active/standby ASA configuration do I have to configure ASA standby on CDA ? It seems to be confirmed by doc: http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/aaa_idfw.html in fa...