Network Security

I need to block ICMP requests from being received by the switch. And there is no 'control-plane' configuration mode, which I was going to use for this.How can I configure this feature or apply another for my purpose?

Hi All,          What is the syslog message id for User password change event for Cisco ASA Firewall. Please suggest us. Regards, Shalendra

Hi, I have an issue like everyday for a particular period of time my internet  bandwidth getting full. Can i get an insight  If i capture the packet from asa and analyze ?. During packet capturing  asa performance will degrade ?  I tried to capture  ...

Hello Folks i am having ASA 5520 with 512 DRAM which use for l2l vpn purpose only , is it safe to upgrade from 8.0.4 to 8.2.4 or 8.2.5 do i required memory upgrade as i seen some doc saying memory issue can occurred after the upgrade but i didn't fin...

Hi, I think I'm experiencing asymmetric routing. how can we prove/verify that we have asymmetric routing issues? (SAMPLE CONF) object network PUB1 host 2.2.0.3 object network RT1 host 10.0.0.3 nat (inside,outside) source static RT1 PUB1 object networ...

Currently, our ASA 5512 is configured to route outbound traffic to the Internet and I need to be able to configure an additional uplink to a dedicated connection.  I have been using NAT for inbound access to servers over the current uplink.  Now, I n...

We have migrated site-to-site VPN from Router to ASA. There was an issue with Exchange mail between sites and it was resolved by removing "inspect esmtp" . Now some users are reporting random search issue with the inbox. Sometimes the search result f...

Hi all,I’m having a problem to save Cisco ASA configuration in GNS3 via write memory command.    ciscoasa(config)# wr mem   Building configuration…   Cryptochecksum: c066a7ab b5b9071e bb5ee1f6 2d93be53   %Error copying system:/running-config (Not eno...

Hi.I'm trying to build a firewall and wanted to use the "ip port-map user-xxx ..." command to make a custom protocol that I could then use in protocol statement insice a class-map type inspect.Is this yet another thing missing from IOS XE, like the l...

I have a question about an issue with LWP and the Rapid7 Connector.Here is a snippet of whats going on:Script Output:<omitted>:[/opt/rapid7/nexpose/sourcefire_connector]# ./rapid7_connector.pl  -csvfile=output.txt -plugininfo=InputPlugins/Nexpose.yam...

I enabled a few DNS blacklist snort rules along with creating my own. None of them will trigger an alert/intrusion event. I verifed that the rules are enabled and everything. I took these same rules and applied them to open source snort and they do t...

Hi, We are purchasing a Cisco 5525-x to take advantage of a shared site's 300MB line, but have two other sites that use an existing 5505 with 8.2x IOS version.  Is there a way to find out if we can properly connect the 5525-x to our existing 5505 8.2...

We are looking to upgrade our ASA from the Legacy IDS/IPS to FirePOWER(need to purchase SSD), we are using the botnet license, would going to FirePOWER make the botnet redundant as sourcefire/firepower does the same job?We are looking to purchase 2 n...

Hi, I replaced a Cisco 881 router with an ASA5506 firewall on a small network and now the users can't use their softphone application. The softphone is locally installed application on the PC and it connects to a IP/phone service on Internet.It was w...

Hi All, I am not able to ping the outside interface IP from internet. But I can ping from the ASA to internet. FW# ping 4.2.2.2 re 1Type escape sequence to abort.Sending 1, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:!Success rate is 100 per...