Network Security

Hello, I'm setting up rate limiting on an ASA with the police command.  I can't seem to find if this is a  per host basis or if my entire group will be limited to the set threshold.  If I use an ACL to include RFC 1918 and permit the rate limit on th...

Hi, We already have a subnet defined to inside interface and is in produciton. the default gateway is this interface ip. In that setup now I have to add one more subnet and as the first subnet is been defined in ASA indside interface, I have to assig...

  Primary ASA is stuck in constant scroll. It appears to be regular logging information (session builds & teardowns), but will not stop scrolling. I'm unable to enter commands. Secondary unit does not have the same problem. Running version 9.2(2)4   ...

Hi We are using the CSM ticketing  System and also we have an external ticket System from HP now. Before we had ASSYST as external ticket System and it was possible  from CSM to jump direct to the ticket at ASSYST Now we have HP Service Manager and t...

Hello All, I am observing some 150-300 scanning Attacks on my Cisco ASA firewall. I have enabled threat-detection scanning-threat,however the attacks don't decrease. I am just curious whether these are normal or something can be done to fix this. Tha...

Our security team tested vulnerabilities on ASA 5525-X. Somehow they could display the ios version. This is considered a security risk. Is there any command/settings (similar to encrypting a password) that masks displaying the ios version to outsider...

We have a Cisco PIX 515E (not sure what OS or PDM version it has) We removed some unwanted tunnels from the GUI. But when we look at the command line, we still see some commands that we could remove. Look at this code. Tunnel IP addresses have been r...

Hello thereis there a way to find duplicate ACLs on cisco ASA?I have just restored running-config (nearly 800 ACLs) onto our new ASA and it threw out a message :WARNING: ACL-name found duplicate elementthe model we have is 5512-x, I googled it online...

Hello.... I'm not getting any data displayed in monitoring view. When I hit Apply to run the view, IME searches the database then responds there are too many events to display and prompts to display the first 50000. After hitting YES nothing is displ...

I have been researching Firepower/Firesight and came across DLP, but it is not very informative what I have found so far.  Currently our S370 will be coming up on EoL in 2019, and our current contract expire next year, so we are looking at alternativ...

Hello, I'm deploying sourcefire to my domain. I just brought it out of monitor only mode. I had a handful of acl's which delt with social media sites etc within sourcefire. I was expecting it to hit the captive portal, but nothing ever comes up. I ha...