Network Security

Hello All! I am struggling to figure out why my NAT / Port Forwarding is failing. Here's what I know about the site I'm configuring up. 1. The site is turning up a new DVR system. 2. The site has a Cable Modem as their ISP with two Static IP's (tha...

Hello Guys. Yesterday I have upgraded Firesight and ASA5555 to version 6 at our customer site. FireSight upgrade was easy and it completed successfully, but then I was unable to upgrade FirePower modules - I was getting error. So, I did it manually w...

I am getting the following alerts and cann't figrue them out: [119:4:1] http_inspect: BARE BYTE UNICODE ENCODING [Impact: Unknown Target] From "10.x.x.x" at Tue Nov 24 18:48:29 2015 UTC [Classification: Not Suspicious Traffic] [Priority: 3] {tcp} 9.1...

I understand the ASA sip inspection is enabled by default on its service policy. Can I disabled it and not causing any problem?I noticed the ASA does has sip session transit through it.ciscoasa(config)# policy-map global_policy ciscoasa(config-pmap)...

Cisco 5505 ASA Inside subnet is 192.168.0.x netmask 255.255.255.0, ASA address on the inside: 192.168.0.40 Outside: The 5505 ASA has one address on the outside: 192.168.125.250 netmask 255.255.252.0   (i.e. /22) There is a time server at address 1...

Hi, I am having some issues with my ASA5505, and an ADSL connection. I make the setup without problems, configure the ADSL settings, nat for browsing, etc. All is working exept for the port NAT from the outside ( ADSL with dynamic ip interface), to...

I am trying to mainatain a 5505 firewall from my office Mac OSX, using the ASDM java application.However, it refuses to run after I upgraded to the latest OSX version 10.10.1 (Yosemite)When activating it the system says I need to get the Java Runtime...

Hello, my network scenario is like this ;  Dhcp is configured in core switch. Core switch is connected to ASA and ASA is connected to the ISP cisco switch . In the ISP switch , the port for internet is configured as DHCP . So I configured the wan po...

Hello All, I recently saw a config I am trying to understand.  Firewall in front of 6807 Switch.  There was a vlan on the 6800 with a public IP address but the next hop was the inside interface of the ASA which was a private IP address.  Then the A...

HI , I dont know if anyone came across about to block icmp tunnels with asa. https://n0where.net/icmp-ip-tunnel-icmptunnel/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+n0where+%28CyberPunk%29 Just trying to search if ASA can detect i...

Hi, I have a Cisco 877 in bridge mode (please dont tell me I am wasting the device in this configuration. It is the only DSL modem that connects and stays connected. I am nearly 4km from the Exchange). I have an ASA 5505 with ASA Version 9.2(4) insta...

Hello, I am attempting to import a root CA certificate into my ASA 5585X from our internal PKI.The CA Cert uses the following:Signature algorithm - ECDSASignature hash algorithm - sha256Public key - ECC (384 Bits) I get the following error when attem...

We are currently using an IPS (SSP-10) on an ASA 5585-X in promiscuous mode. Whenever we change the IPS ton inline mode using "ips inline fail-open", it completely blocks all traffic going through the ASA. The IPS is currently working because we are ...

I am swapping out a 5505 with a 5525-X and I am having trouble setting it up. Than you for any and all help. y.y.y is my main office public subnet x.x.x is the remote site IP address .3.0 is the inside at remote site and  96.0, 5.0, 172.16. are at m...

Hi all, I'm trying to traceroute from Windows PC through CISCO ASA IOS 9.1(1) - Multiple Contexts When I'm using PAT, traceroute doesn't work When I'm using static NAT 1 to 1, traceroute works! I can't figured out what can be. Please help.