Network Security

Hi Experts, This time for your advice on below point..1) Recently we were having a vulnerability assessment testing(through a tool) on  network and observation are :-"SSH Weak MAC Algorithms Enabled,SSH is configured to allow MD5 and 96-bit MAC algor...

Hello All, I need to allow traffic thru my ASA for expressway. Per the guide they want a range of TCP and UDP ports open into my DMZ from inside and outside. I thought I wrote this out correctly but, when I check it via packet tracer is says that my ...

Dear all, am having cisco ASA 5515-X IPS  with internal IPS.I did the initial config for ASA and session IPS too configuration (same network), but i can`t ping from the ASA to the embedded IPS. Do route needed or not?I need a resource for initial con...

Hi,Im connecting to my firewall through the console port, and need to know how to reset it to factory defaults. I have looked around online and can not see any reference on how to do this.Any help would be much appreciated thanks.

Hi It has been a couple of years since I last had my hands on the ASA firewall - but a question popped up the other day, which I could not answer.. Is it possible to do policy based destination PAT from the outside to inside interfaces - based on sou...

Hi , I have some services running behind  fwsm . sometimes i am not able to connect to the services behind fwsm .for example services running port 8888,i have permitted icmp .but i cant ping the interface ip. (192.168.111.1) .server behind fwsm are i...

I want to access Web Server from inside. My Web server is located in DMZ (IP:192.168.4.11). So how to NAT and create ACLs??? P/s: my English is not good!!! :D   

Below is my configuration setting a tcp half closed sessions applied to the outside interface. ACLaccess-list tcp_timeout extended permit tcp any host static_mapped_outside_IP eq 443  Class Map  class-map tcp_timeout_cmapmatch access-list tcp_timeout...

I recently acquired a 5506-X and I have to say that the out of the box experience with FirePOWER and with Cisco's website is pretty bad.Once the 5506-X has completed the initial configuration wizard, and the user has jumped through the hoops of insta...

I heard at the last Cisco Live that Estreamer API was being updated to enable export in CEF (Common Event Format).  Where can I get an update on the status of that feature being included in Firesight Management Center.  What version will it ship with...

I need to know how to monitor ASA with FirePower Services for both hardware modules on ASA 5585-X and software modules on all other ASA platforms - using either SNMP traps, syslog messages or API on a ScienceLogic EM7 platform.Where can I find inform...

Seems the pattern matching on the reboot command only check the first few characters... "ciscoasa# session sfrOpening command session with module sfr.Connected to module sfr. Escape character sequence is 'CTRL-^X'.(none) login: adminPassword:Last log...