Network Security

I am using HSRP to create a failover pair of 891F security routers.  This router pair will act as a firewall between headquarters and a "mostly trusted" partner.  I have a directive to use stateful inspection whenever possible so I'd like to use the ...

Afternoon all,  i was wondering if i could get some help,  i have an ASA 5505, that keeps crashing every 4 to 5 days.  Everytime is happens its due to a depleted memory block. The error is:  System is low on memory block 2048 (0 CNT of 1200 MAX). Can...

Hiwe have cisco IPS 4260 which blocks a public ip outside our network.This IP is used to send mails.I tried following commandssensor# configure terminalsensor(config)# service network-accesssensor(config-net)#Step 3 Enter general submode.sensor(confi...

We are considering ASA with firepower and firesight management/analysis.  What kind of integration options, if any, are there for integrating analysis functions of firesight and aanval?

Hi Friendzs, Query is regarding packet tracer command. packet-tracer input [src_int] protocol src_addr src_port dest_addr dest_port [detailed]Eg -  packet-tracer input outside tcp 192.168.10.1 0 172.17.190.24 443 detailedAs I am not aware about sourc...

Hi Guys,On Cisco ASA, I wants to configure a rule with "SPECIFIC RULE Number"...  Example I want set the below access list for DMZ network, post configuration in ASDM this rule should appear as a 25th rule -- "access-list DMZ-IN extended permit tcp o...

Hello Everyone. we are testing a HTTP inspection on ASA for our corporate network in development network. after doing config of the commands policy-map type inspect http HTTP_Inspection_Map description Inspect the HTTP traffic parameters  protocol-vi...

Hi,  I am trying to allow http/80 connection on my new asa 5516 to access a web server. I am using static nat with port translation to redirect the traffic to the web server.   There are 2 problems: 1) Http traffic is blocked as soon as it arrives at...

Hi all,I'm after a plain English answer for a simple tech like myself. I'm trying to understand what each licensing component of the Cisco Firepower suite are. I work for a Cisco partner (I'm Cisco qualified), and neither our Cisco contact or distrib...

We just replaced ASA  IPS Module with FirePower, would it be better to use ASDM or FireSight to manage them? I very much appreciate you, experts-thank you

Dear All,i currently have a big problem with inter-interface routing within ASA. If you could please take a look at my topology.My big problem is i can't ping from .82 which is R1 to 172.20.0.161 (ASA outside interface), i created a scenario when the...

5506-X here - polices were working fine, then stopped.  I see in the real-time log viewer the SFR module is working - I see "SFR requested to drop TCP..." but the ASA is ignoring that and allowing the traffic.  Tried the usual reboots, etc.I have a s...

 Dear Team, We are getting following error, kindly tell me meaning for this error.Jul 31 04:12:12 Jul 31 2015 04:12:11: %ASA-4-313005: No matching connection for ICMP error message: icmp src outside:19.18.54.2 dst inside:10.8.1.11 (type 3, code 3) on...