Network Security

Is there any way to drill into a Security Intelligence Event in Sourcefire? I am seeing numerous outbound CnC events coming from a host but cannot see what application, service, etc. is causing the triggered event. Thanks!! Scot Lymer

Hello, I am using Sourcefire Linux OS (virtual) 5.4.0 (build 126).  I wonder how I can find out the available recommended/required updates/patches for this. I logged in below link  https://software.cisco.com/download/navigator.html?emailclick=CNSemai...

Hi We have a customer that wishes to upgrade a HA pair of ASA5520's in Active standby mode from 8.4.7(30) and a HA pair ASA5585-X (I believe as the current code has the smp designation in the image file) in context mode from 9.1.(2) to the latest cod...

Hi all, I use port-security mac-address with violation shutdown. This is very usefull for all computers in a classroom. But I have Laptop authorized and this one is could plugin into another port of the same switch. So I could define this mac on anot...

Hello Folks! Is my first time that I´m configurin DMZ on ASA. I create a interface with security level 50, my outside is 0 and inside 100, All intefaces with diferent IP range. Based on security level the inside should be able to talk to dmz, but is ...

I configure a AD client to Cisco Firepower, bus it don't connect. Message error:

All, I have been attempting to identify which FireSight/Sourcefire rule(s) cover a particular CVE identifier.  The CVE information is often found within a particular rule, but I have not been able to discover any way within the Defense Center to sear...

Hi Guys I will be asking alot of question in the coming months, forgive me, trying to get into the security field. If a user asks for ASA-fpwr-k9, and thats it. these users are from different countries so i cant go and spec their environment. I want ...

I have a Sourcefire implementation with FMC 5.4.1 and an ASA 5506-x running firepower 5.4.1. I have configured a file policy to inspect all files and have an access control rule that does cloud malware lookups, including sphero and dynamic lookups fo...

Hi, were experiencing an issue where our speeds are slow and were getting the folloing in our log files... I assume were under some sort of attack, but im not sure what to do about it. No matching connection for ICMP error message: icmp src Outside:2...

Hi all,I have been directed here from my previous discussions on the UC500 forums https://supportforums.cisco.com/thread/2235187 as it is thought my issue is more ASA than UC500...Fundamental problem is I can't get the SIP trunk to register, however ...