Network Security

Hello, I am attempting to import a root CA certificate into my ASA 5585X from our internal PKI.The CA Cert uses the following:Signature algorithm - ECDSASignature hash algorithm - sha256Public key - ECC (384 Bits) I get the following error when attem...

We are currently using an IPS (SSP-10) on an ASA 5585-X in promiscuous mode. Whenever we change the IPS ton inline mode using "ips inline fail-open", it completely blocks all traffic going through the ASA. The IPS is currently working because we are ...

I am swapping out a 5505 with a 5525-X and I am having trouble setting it up. Than you for any and all help. y.y.y is my main office public subnet x.x.x is the remote site IP address .3.0 is the inside at remote site and  96.0, 5.0, 172.16. are at m...

Hi all, I'm trying to traceroute from Windows PC through CISCO ASA IOS 9.1(1) - Multiple Contexts When I'm using PAT, traceroute doesn't work When I'm using static NAT 1 to 1, traceroute works! I can't figured out what can be. Please help.

Hello people, I want to know how I can configure from scratch an 1941 router to enable IPS security on it, If you can provide me that configuration and to let you know I just need this configuration for a single router . Regards Santiago L. Hoffman...

Hello Folks, I have a query which I am trying it hard to resolve. I have a server sitting in inside interface wants to gain access to internet from a public ip other than the outside interface ip, but having error. Inside interface srever ip : 10.1....

Hi Friends,I am new for cisco ASA 5540, I just  bought cisco ASA 5540 for my small office setup and version is Cisco Adaptive Security Appliance Software Version 8.0(3) Device Manager Version 7.2(1), can anybuddy help me to configure device. I am try...

I have a doubt in Cisco ASA.Is it possible to add additonal line card on cisco ASA-5510.if possible please let me know.

Hi Guys, I use 2 ASA5512 Active/Standby and 2X stacked 3850 in my live environment i have an issue with the failover i loos the ethernet channel when failing over to the standby unit i have raised this with cisco support and they came back with the a...

I doubt that this can be done without contacting the isp, but a traceroute to my network shows the isp private ip addresses.  Is there anything I can do on my ASA to still keep traceroute alive but block the private ip addresses?

Good afternoon, I have just been on a course where I have been configuring Cisco ASA 5510 firewalls, and have returned home to continue practicing, however the 5505 on packet tracer seems to lack the commands of the 5510. Is this the way it is? Com...

I am trying to understand what is required to convert my ASA5512-SSD120-K9 to Firepower for IPS.  I am running in an active-standby.  I currently have the following: ASA5512-SSD120-K9 L-ASA5512-IPS-SSP (IPS Module which activated IPS on my ASA) Smar...