Network Security

Hi Experts,Good Day!I would like to seek for your assistance how to mitigate some vulnerabilities in my ASA with CX. I perform vulnerability test using Qualys into my ASA with CX and it hit me with a vulnerability named "TCP Sequence Number Approxima...

I have a Cisco ASA 5505 8.2.  I just wanted to do a straight forward configuration for now to allow the internal network to access the internet.  I have no rules in place, only the basic configuration and nat.  I have nat_control turned off and here ...

I have a Cisco 5520 in the LAB, and every once in a while the fans start to go very loud for about 2 minutes, it is running the latest IOS, is it normal or the fan is bad? any solution to make it silence while running?  thank you so much.

Hi Folks,              I am observing packet drops between the interfaces of ASA firewall. In other terms, I have PC-A on Vlan-48 associated with the physical interface Ethernet 0/0.48 and PC-B on Vlan 52 associated with the physical interface Ethern...

Hello Everyone, I am installing new firewall 5515-X with firepower services. i setup the firewall with inside and outside network and i am able to access the internet and everything works fine. Now i enable the firepower services using "session sfr c...

Hello Everyone, Just a simple question.Can i set more than one snmp-server community using an ASA running on version 9.2?I already have one community configured, like:snmp-server community TESTsnmp-server host management X.X.X.X community TESTI'd lik...

Hi all,This is probably not a specific firewall issue but as it happened on my firewalls I thought I'd post here.I have 2 ASA5555-X firewalls back-to-back connected via a redundant pair of GigE CAT5 cables. I've configured both firewalls with a redun...

hii would like to know, is it possible to implement a distributed firewall with help of cisco asav firewall?

I have 5515 CX FW. I want:- To redirect all internet traffic coming from outside into the inside network via CXSC.- No CX inspection for oracle traffic (88.x.x.x) both ways.interface outside is my internet (94.x.x.x)I did following:object network obj...

I have an easy question for someone. I am used to the pre-8.3 IOS version of nat'ing and am having some trouble on a newer version nat.What I am wanting to do is port inbound http/https traffic from the outside in and send it to port 5081 on the insi...

I am migrating from asa 5505 to 5512, i would like to know how do i write nat commands in new version nat (outside) 1 NEW_VPN_POOL 255.255.255.0nat (inside) 0 access-list inside_nat0_outboundnat (inside) 1 Inside_Subnet 255.255.255.0nat (dmz) 0 acces...

We have a cisco ASA X series and we have a dynamic PAT rule in place which works fine but then every so often we randomly get syslogs as below %ASA-6-110002: Failed to locate egress interface for protocol from src interface:src IP/src port to dest...

HelloI have ipx connected to router and then to asa but unable to access to console soft on inside to view the statistics manager callAsa=======router=====ipbxPc ====== wifi (on network inside 192.168.1.1) is unable to access console statistics manag...