Network Security

I currently am using the following info: object-group service rdap-ports tcp port-object eq ldap port-object eq httpsinternet-routers port-object eq h323 port-object eq sip port-object eq 5061 port-object eq 5222 port-object range 10001 13000 port-ob...

I am relatively new to firewall rules and need some help. We are about to add about 10 sub-nets and 6 virtual servers to our domain. We have an ASA 5505 firewall, version 7.2 with a basic license. Do I need to add VLANs for each of the sub-nets, or d...

Dear All, I have a cisco ASA 5525x with SFR software module installed on it. We were facing the issue of failover not happening. but yesterday all of a sudden we started getting below messages : VPUN1-FW01# sh failover history =======================...

Hi Everybody, currently I'm working on implement policies according to the CPPr but a couple of questions comes to my mind: 1. Is there any standard to start policing the Management traffic (SSH, SNMP, Telnet, etc)??2. How can I identify the current ...

HiHas anyone come across a case where you are unable to delete a policy from a DC? I have a policy with 0 applied devices on my 5.3.1 Virtual DC that gives me "This policy cannot be deleted because it is applied or currently applying to one or more d...

I added a second ISP and public IP block to my ASA that is running 9.5.2.  I use a route-map and ACL to match internal private IPs that are then sent to the Internet via the second ISP.  This seems to work fine for PAT. Since it was working well, I d...

Hello All, what all we required when  communicating from Inside(security level 100) to dmz (security level 25) both having private pools . inside ip 192.168.7.10 dmz ip 192.168.107.10 service rdp . I know we need to add ACL on DMZ-in apart from that ...

Hi, I am wondering how can I block people creating personal wireless hotspots like connectify in their computers. Can I block this from IPS module or ASA5585, same like I have already blocked torrents. Regards, Amit Dangi.

hi, i want to set up our ASA to send notification to our admin via mail, i am trying to configure email notification on Configuration > ASA FirePOWER Configuration > Local > System Policy but when i try to test it failed. thank you! Best Regards, Phi...

Hello, when configuring snmp-server groups on a cisco switch, what does read v1default write interface mean? Can the snmp-user read the whole switch configuration with all the passwords? The current configuration is read interface write interface, so...

Hi Somehow I can not deploy my access policies anymore. The green button disappeared. As admin user there should not be any permission missing. Can you help me out here? best wishes Tobias