Network Security

I noticed when i try to specify logging facility on the ASA; it only allows specify in the range of 16-23. My problem is the syslog server doesn't seems to have local 16-23 (it only has local 0-7). My goal is to specify different devices (eg. router ...

Please help me that the attached network diagram is correct. I am using two firewall in active/standby mode. Outside interface is using port-channel 12 with switch 3850 having ip address 10.181.11.1/24 standby ip 10.181.11.2. I have ISR 3925 router a...

Hi all, I need an IPS service for my ASA 5545-X. What is the difference between IPS module and SFR Firepower module? If I understand it right, SFR does the same like IPS but also URL filtering , AMC and AVP ... Is that right? Thank you.

Any one can give an idea on what is the following static NAT doing in version 8.2?  or any case need these static NAT with one to many nameif ?  Configuration:     static (inside,a) 172.19.1.165 172.19.1.165 netmask 255.255.255.255     static (inside...

Hello Team, We have a problem right now, we are trying to upgrade our firesight and firepower suddenly bypass mode is not working, all our network connection went down for about 5mins. after the firepower up  then our connection back to normal. What ...

Appreciate locating the config on ASA 5510 flash: file There are two files. Used CLI to ASA# flash dir How would you load the ASA 5510 config file from tftp ? Thanks.

Hi Guys, Is there a way to see the stateful ACL which the ASA applies ? If I initiate a traffic from Inside to internet, it creates a hole on outside in . how can I see that invisible ACL and no access-group was applied. IN another way how does the A...

at the moment, we have a 5545X /SFR setup in monitor mode so we can see the traffic breakdown in Firesight. What I'd like to do is have Firesight send a notification (via email?) if a certain type of traffic or a specific application is seen. I can d...

Dear AllI want to add QoS in my ASA 5512, but I haven't any QoS knowledge. I find this page (http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/82310-qos-voip-vpn.html) and don't know some code meaning. cis...

We currently have a ASA 5505 with 2 isp.  One primary and another backup.  We would like to use one isp for certain traffic web, etc and second isp for VOIP.  Based on other threads, I understand that policy based routing is not possible through 5505...

Hello all,  I am trying to figure out a way to get Firesight to create/send a monthly report that shows the number of trojans, botnets, intrusions atempts and malware are identified/blocked.   Any help documents on this area?  Any help is appreciated...

Good Morning, Looking for so help with Cisco ISE. Was recently tasked with looking into enabling PKI on our ISE. Not really saavy when it comes to PKI and was hoping to get some guidance as to how to set this up. Not sure if this could be done using ...

Hi Guys, Good day! Is it possible to work if I have a router which has VRF and I connected it in my ASA which only running a single-context mode? Thanks

How can i obtain the patch for the CVE-2016-1287 vulnerability? We don't have a smartnet for this firewall so I can't start a TAC request.