Network Security

Hi All   I wonder if anyone can tell me the meaning of description fields in the log viewer. I looked throught the Cisco ASA book and i cannot find it in there.  Built (in | out)bound TCMP connection for faddr (faddr | icmp_seq_num) [(idfw_user)] ga...

Hi all, I've one strange problem on my router 1801w with 12.4advance IOS. I've enabled Zone secuity firewall and it's working very well for a better controlling of the traffic in my network. -----Problem1 BTW I received an unexpected behvior in my d...

Hello All! I am struggling to figure out why my NAT / Port Forwarding is failing. Here's what I know about the site I'm configuring up. 1. The site is turning up a new DVR system. 2. The site has a Cable Modem as their ISP with two Static IP's (tha...

Hello Guys. Yesterday I have upgraded Firesight and ASA5555 to version 6 at our customer site. FireSight upgrade was easy and it completed successfully, but then I was unable to upgrade FirePower modules - I was getting error. So, I did it manually w...

I am getting the following alerts and cann't figrue them out: [119:4:1] http_inspect: BARE BYTE UNICODE ENCODING [Impact: Unknown Target] From "10.x.x.x" at Tue Nov 24 18:48:29 2015 UTC [Classification: Not Suspicious Traffic] [Priority: 3] {tcp} 9.1...

I understand the ASA sip inspection is enabled by default on its service policy. Can I disabled it and not causing any problem?I noticed the ASA does has sip session transit through it.ciscoasa(config)# policy-map global_policy ciscoasa(config-pmap)...

Cisco 5505 ASA Inside subnet is 192.168.0.x netmask 255.255.255.0, ASA address on the inside: 192.168.0.40 Outside: The 5505 ASA has one address on the outside: 192.168.125.250 netmask 255.255.252.0   (i.e. /22) There is a time server at address 1...

Hi, I am having some issues with my ASA5505, and an ADSL connection. I make the setup without problems, configure the ADSL settings, nat for browsing, etc. All is working exept for the port NAT from the outside ( ADSL with dynamic ip interface), to...

I am trying to mainatain a 5505 firewall from my office Mac OSX, using the ASDM java application.However, it refuses to run after I upgraded to the latest OSX version 10.10.1 (Yosemite)When activating it the system says I need to get the Java Runtime...

Hello, my network scenario is like this ;  Dhcp is configured in core switch. Core switch is connected to ASA and ASA is connected to the ISP cisco switch . In the ISP switch , the port for internet is configured as DHCP . So I configured the wan po...

Hello All, I recently saw a config I am trying to understand.  Firewall in front of 6807 Switch.  There was a vlan on the 6800 with a public IP address but the next hop was the inside interface of the ASA which was a private IP address.  Then the A...

HI , I dont know if anyone came across about to block icmp tunnels with asa. https://n0where.net/icmp-ip-tunnel-icmptunnel/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+n0where+%28CyberPunk%29 Just trying to search if ASA can detect i...

Hi, I have a Cisco 877 in bridge mode (please dont tell me I am wasting the device in this configuration. It is the only DSL modem that connects and stays connected. I am nearly 4km from the Exchange). I have an ASA 5505 with ASA Version 9.2(4) insta...

Hello, I am attempting to import a root CA certificate into my ASA 5585X from our internal PKI.The CA Cert uses the following:Signature algorithm - ECDSASignature hash algorithm - sha256Public key - ECC (384 Bits) I get the following error when attem...

We are currently using an IPS (SSP-10) on an ASA 5585-X in promiscuous mode. Whenever we change the IPS ton inline mode using "ips inline fail-open", it completely blocks all traffic going through the ASA. The IPS is currently working because we are ...