Network Security

Hi all I am planing to upgrade our asa5505 software to the new version (9.2). Currently we are running 8.2 and some boxes are running 8.4. I have read that I have to reconfigure the NAT part in order to make it work on 9.2 Are there anything else ...

Hello All, I'm hoping for some help in debugging a problem with the syslogs from our ASA device.  We're missing data.  A _lot_ of data.  I'll say up front that I am not the administrator of the ASA device (I'm the consumer of the log data) but our lo...

Hi All I have a Cisco ASA 5550 that already has 4 physical interfaces used which includes the use of 8 redundant interfaces under redudant1. I am planning on using some of the spare physical interfaces shortly but wanted to use redundant interfaces ...

Hi,We have a 5540 firewall, when we push up a firewall rule one step we get a message from ASDM that this cannot be done. See file included?Why is this, I did never see this problem. We use a lot of ASA's including 5550 and 5580's.ASA image is 8.4(1)...

Hello, I cannot remove the Maximum Other VPN Sessions on my ASA. It i fixed to 250 but my license is to 2500 Other VPN Peers. When I remove with the commande :  no max-other-vpn-limit 250 It is the Ipsec  VPN site to site who are impacted. But my req...

Hi,I was wondering with a single ASA is there a way to have multiple contexts use a dual ISP? For example context A has an inside and an outside(A) with another outside(B) for failover. Context B has and inside, and outside (B) and another outside (A...

So just to set a correct picture, we have the firewall running and can create a single port PAT translation that works just as expected. .What we can't seem to get right is the way to open a range. We are replacing an older linksys device and this on...

Hello all. My customer would like to purchase UCSE blades on their ISRG2 4431 routers for their branch offices. They would like to run the Firepower NGIPSv VMs on it. My question is - Is there a way that the NGIPSv can drop traffic inline (IPS mode) ...

The Sourecfire website used to have a knowledgebase where I could go look up issues that other individuals encountered and the resolution for them.  Does Cisco have something similar to that?  I can't seem to find it on the support website and I don'...

I'm having issues with getting SIP and RTP traffic through a Cisco ASA with NAT enabled. Diagram of issue: http://i.imgur.com/Ymwl7Xm.jpgNow, when we enable the SIP inspection on the ASA, the SIP messages are generated by "SIP CLIENT" and when genera...

How do you make sure you’re selecting an NGFW that reduces opportunities for thieves across the full attack continuum – before, during, and after an attack?Marc Solomon, VP of Cisco Security Marketing has some thoughts on this topic.Read the Security...

Is it possible to configure ASA to generate syslog msg when admin user log in and log out=br

Hello, Before I say something out of turn can anyone tell me a valid reason that someone would assign a public IP address to an interface on a 6800 that is a core switch? SSH is also open from the outside to any IP address.  True you have to authen...

I have SETUP ASA 5525-X firewalls in a active standby HA pair. It's inside interface (Gi0/0) is terminated on L3 switch (vlan30), firewall will use L3 switch to reach all the inside segments. On the inside network we have vlan's for DATA (vlan10), MG...

Does anyone know if they removed the easy vpn client for the ASA 5506-X. I can make it as a server but not a client or is there a replacement?