Network Security

Does SSL inspection work if the Sourcefire appliance is connected in passive mode (not inline mode) ?  Note I have an appliance with  built-in SSL inspection (not a single appliance). Appreciate your detailed answer. Thanks, Mahmoud Seif

Hia few days ago I detected an IPv6 outage in Internet connectivity.I finaly found that the Problem occurs between the ASA 5550 (9.1.1) and the core Switch (Cat 6500 VSS (12.2(17r)SX7)).As soon the Problem occours the neighbor discovery for the core ...

Hello,I have here a passive deployment of a FirePower Appliance. Unfortunately there are around 40 hosts which get tagged as ESX Servers...which is not correct. Are there ways to optimize the OS detection? I know of NMAP scans, are there other option...

Hi Team, Please help me on this issue on ASA.  1. Failed to forward traffic for a specific IP 2. That specific ip is previously allowed on the firewall and it was working properly 3. Packet tracer output is fine 4. Flag is saA Thank you for your help...

Hi, I was just wondering if there is a way to wipe the configuration for the SFR module in a 5506? Basically I'd like to get back to the point when you first session into the SFR and you're greeted with the EULA and then the setup page. I've just upd...

Dear all, I CAN access my new asa5512 (version9.12) by asdm-731-101. But I CANNOT access by asdm-743 in same setting!! My asa is Security Plus license and I have uninstall old asdm windows program and download new asdm by webpage But still can't conn...

Hello All, I have a new Cisco ASA 5506-x and have installed the Firepower demo license but I can see any traffic passing through the module.  I've followed the config document at http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firep...

Hi ! We are using our ACS server 5.6 running patch Level 4 to authenticate users on different telecom equipment  with in the Compagny. I'm actually trying to configure "read only access" for some users to our BlueCoat Packet Shapper device.  The full...

Hello, I have installed Cisco Router that is connected to dual German ISPs and ASA 5508-X. The network is as follows: ----------------------------------------------------------- ISP1                           ISP2 192.168.1.1              192.168.2.1...

Hi everybody, I want to know if the Catalyst 4507 (2 Switchs as a VSS) is compatible with ASA 5585-X Spanned Etherchannel Clustering? I didn't see it in the external hardware and software support for asa cluster. Did anyone tested this?  Regards.

Hello All, Thanks for taking the time to read. I've been searching through the community but still a little confused as to the Control license.  I received a slip of paper with the 5506 and dutifully went to licensing and redeemed the PAK.  All seeme...

Hi Guys, When you do show nat or show run access-list it is a nightmare to trace objects and object groups. Is there a way to see the resolved object when running show nat ? or show an object group? with acl, I do show access-list x rather than show ...