Network Security

Hello,we have the problem, that a few server OSs are not correctly identified.Some of them are ESX hosts, some are appliances like CUCM.Is there any best practice or recommendation of solving this? I know I could start NMAP, fingerprint the server or...

  We have received following penetration vulnerability for Cisco ASA Firewall 5500 (S/N: JM164940Q0) Vulnerabilities Risk/Severity Recommendation by vendor for closure of vulnerabilities Multiple issues related to SSL certificates were identified on ...

Hi, I have the following  configuration , but it does not working , logging enableno snmp-server locationno snmp-server contact snmp-server host INSIDE 192.168.2.1 trap community passwordd snmp-server enable traps syslog logging history notifications...

Hi All I have a server on our internal network that has very limited access from the internet. Therefore it has an external address that is NAT'd at our firewall. However I want to arrange to access the server from our LAN also using its external add...

Hi, Currently I have a private line owned by SP and I setup a Backup line which is VPN tunnel. I'm using CIsco ASA 5512 on both sites I would like to ask the ff. 1.By default is Voip traffic permit or deny  by our firewall? 2. For Voice traffic do i ...

Hi,How to enable software bypass on clustered firepower 8350 devices.Sometime during troubleshooting we need to bypass IPS for test-traffic. How to achieve this without physical cabling changes/switch config changes.I  see Access Control rule with Tr...

Hi, Need to know the explanation of  NAT access-list policy extended permit ip host 192.168.60.207 host 192.203.187.140 nat (Outside) 1 access-list policy Above is zero nat zero that says if source is 192.168.60.207 and going to destination 192.203.1...

I ping a device with in the Firepower console, but cant escape from the reply sequence. Does anyone know the key combination to quit from the ping request? Thank you.

Hi I have some issue on Cisco ASA firewpoer licensing. Cisco tell us like that " The Cisco ASA with FirePOWER Services base configuration includes the AVC function by default. This feature provides application identification and control of more than ...

I am trying to add ASA5508 to the firesight but failing. show netstat displays established session with DNS server. But with powersight, it is SYN_SENT My powersight is in the inside interface. show int ip br indicates the management 1/1 is in down/d...

Hello, I am testing a new ASA and I am having difficulties getting a machine that I have set up a static NAT for, getting out to the internet. It seems that I can get the traffic in. The test server is a test web server and from the outside I can rea...

Is there a way by which we can block all the connections from a country on Cisco ASA, without we manually defining a ACL. Hardware- Cisco ASA5510- Version - 9.0

Hi, I have got a question and run out of troubleshooting ideas. I have got 60Mb Fibre broadband coming in and connected to ASA 5505 Firewall and then our switches. When I test our speed without ASA 5505 Firewall I get more than 60mb. When I do run sp...