Network Security

Hi,    In our ArcSight ESM we are seeing the "bytes in" and "bytes out" field as the same number for ASA syslog events. From looking at the log explanation (www.cisco.com/c/en/us/td/docs/security/asa/syslogs/logmsgs2.html#pgfId-6941209) , I noticed t...

Three issues that I am having with my FireSight Management console. 1) when I click in the context menu on an IP address to try and look up the WhoIs record, I get back an error saying that the Network is unreachable.2) The context explorer show No D...

Hello Experts/ Freinds, I have a simple question on how do we find particular IP got translated to which IP after NAT on ASA if we do subnet to subnet NAT ( like /24 subnet to /24 subnet translation). show xlate, show conn, show nat commands did not...

Folks Ive been having issues with the time sync on ASA5512-x.   Currently the firewall is configured to sync its time to a server 2003 PC (not a domain controller), this pc has been configured to run NTP (add a LocalNTP DW_WORD key to registry), Loca...

Here's a perl script that connects to an IPS device and then (when passed -l) logs to a file, somewhat simulating syslog. Without -l it will just log to screen, giving a nice pretty colour-coded output. It uses xsltproc and a stylesheet to translat...

I have two firewall units ASA 5525 and ASA 5525-X with the same software version (ASA 9.15) and same licence Anyconnect premium. I want to setup these units as a HA pair. Cisco documentation says that the hardware units need to be indentical. Does an...

Hi All, I tried to add a second asa5515x to the firesight management center but it indicates that is not allowed  I have added the manager in cli command line : conf manager add à.@.@.@.@ cisco123 Is there any suggestion?

Hi Experts,Good Day!I'm new into this CSM, does it support secured(encrypted) syslog messages?Thanks.

Hi all, i have cisco ASA which cover CME inside the network, i config IPsec site-to-site VPN, NAT static, also some ACL. i've allow SIP TCP and UDP but it seem still cannot allow RTP/UDP from outside to inside, the clue was ip phone can call and ring...

I'm new to Cisco ASAs, and have the task of replacing older 5520s with out-of-the-box 5515Xs.  I'd like to do a direct swap-out replacement, using a minimally revised startup-config from the older ASA, but I'm guessing that there are differences betw...