Network Security

I have lost management access to about 10 ASA5505s all within past few days. Of about 20 or so, half of them are unreachable via SSH or HTTPS. The firewalls are up and operational, including the VPNs to the central data center. I can ping them just f...

Hello all, I have installed Cisco CSM Server 4.9 as a software on my customer's Windows Server 2012 (henceforth called as the "host"). I can login on the host using RDP and that too using my AD account as given by the customer. I do not have any acce...

I want to test connectivity on udp port 500 on other side how could i check whether udp port 500 is up or not what command used on cisco router and ASA?

Hi How can I assign another ip address to an interface on ASA5580, actually my ip range (172.16.31.0/24) already got exhausted, and I have neighboring range in use elsewhere so want to assign different range(172.16.41.0/24) for other hosts in that zo...

We've a problem using fiber link to ASA 5555-X, with additional ASA-IC-6GE-SFP-C card. If we connect cable to GLC-SX-MMD SFP model, ASA can't do any traffic. If we connect same cable to GLC-SX-MM SFP model, this link works fine. We've tried to set ...

hi all, i am trying to configure the static nat on the cisco asa which is not working. in 8.2 version this is the code nat(inside) 2 x.x.x.x netmask 255.255.255.255 global(outside) 2 y.y.y.y for the above commands i converted to 9.5.2 code which is...

Hello, Yesterday I was trying to add ASA 5508-X series control license to the Firesight Virtual appliance. The firewall was bought with control license, amp and url filter. But no license was bought in the beginning to integrate with Firesight virtua...

Using a 5516-x and we noticed a high performance penalty with SMB transfers and when we enable Intrusion policy. For example: Not trusting smb, 30kbytes/sec transfer trusting smb , 100kbytes/sec.(max) For internet frafic with IDS Intrusion enabled: ...

Recently we have been taksed buy C level executives to block all ip communication to Russia. They are about 65,000 (CIDR aggregated) public ip addresses in China. I dont want to manage an ACL with 65,000 entries not to mention how much larger it gets...

what command is used to clear half open connection in ASA firewall  and does it help reducing cpu processes ?? What are other way to reduce high cpu utilization in production environment?

Hi, I am configuring a firewall which has four zones: 1. DC-INSIDE (security-level 50) 2. DC-OUTSIDE (security-level 50) 3. DC-DMZ-ZONE (security-level 90) 4. DC-SERVER-ZONE (security-level 100) I created the below ACLs for all users can access all ...