Network Security

Hello, I am working on developing configurations for IOS Zone Based Firewall and have this question. When creating a class-map to inspect traffic traversing from my trusted INSIDE zone to the OUTSIDE zone, and I want to inspect all protocols, I would...

Hello All, I am facing an issue with an ASA IPS module. Its showing down. I have tried reset/reload/shutdown, but no luck. ASA# fail exec stand show module ips details Getting details from the Service Module, please wait...Unable to read details fro...

Hi I'm trying to SSH into a vty line on my router that is sitting on the OUTSIDE interface of an ASA. I have tried from the actual router and a PC inside the ASA to and i'm getting the same "Open" message and go to enter the password but when i enter...

I am running 2 ASA-5510 firewalls in Active/Standby.  I recently purchased a single AnyConnect Essentials license - but I had to "Activate" it to a serial number - so I used the current "Active" firewall. My question is, will this license install o...

Can Firepower IPS (8000) integrate with patch management platforms, for example what do platform? and how is the integration?

Hello All, I am facing an issue with an ASA 5525. The software IPS module is down in the standby FW. Any idea why this is down. FW# failover exec stand show module ips details Getting details from the Service Module, please wait...Unable to read deta...

Hello guys i am doing sourcefire POC can anyone please guide me on the following I have 5585 with source fire hardware module Below is the topology after putting ASA 5585 {as of now there is no asa In between} Here is the configuration  Core-1:i...

Hi, We are using a ASA 5512-x with an IPS module. The IPS will occasionally shun IP addresses based on a number of custom signatures we have implemented. I'm currently struggling to find a way to identify the signature that triggered a particular sh...

Hi All, I have doubt in NAT troubleshooting method, Can you please help me in NAT troubleshooting.  I configure the asa firewa as below  interface g1/1 nameif inside ip address 10.10.10.1 255.255.255.0 no shut ! interface g1/2 nameif outside address...

Cisco IOS version 15.1(1)SG is vulnerable to the advisory -  cisco-sa-20140605-openssl (CSCus61884)? "Cisco IOS Software Checker" tool indicates it is not vulnerable to cisco-sa-20140605-openssl,but, in the cvrf file listing, 15.1(1)SG is mentioned a...

hi kindly please help and put light on this please as i could not understad why this is not working. we have one inside interface and one outside interface no DMZ. we want our internal webserver http can be accessable from outside but this is not hap...