Network Security

We have setup a cisco ASA CX module 9.4 (2) and when we go to block HTTPS traffic for like facebook it blocks it. i have carried out following steps 1)Directting HTTPS traffic to CX  2)Generating self-sign certificate to intercept https traffic at CX...

Hello, I am considering a cluster (A/P) of 5516X with FirePower Services and I have 2 questions regarding the management solution for ASA 5516-X: 1) I have seen 5516-X has an internal FMC. Is there any document where it is explained which  management...

Hi All   I wonder if anyone can tell me the meaning of description fields in the log viewer. I looked throught the Cisco ASA book and i cannot find it in there.  Built (in | out)bound TCMP connection for faddr (faddr | icmp_seq_num) [(idfw_user)] gad...

Hi all, I've one strange problem on my router 1801w with 12.4advance IOS. I've enabled Zone secuity firewall and it's working very well for a better controlling of the traffic in my network. -----Problem1 BTW I received an unexpected behvior in my dr...

Hello All! I am struggling to figure out why my NAT / Port Forwarding is failing. Here's what I know about the site I'm configuring up. 1. The site is turning up a new DVR system. 2. The site has a Cable Modem as their ISP with two Static IP's (that ...

Hello Guys. Yesterday I have upgraded Firesight and ASA5555 to version 6 at our customer site. FireSight upgrade was easy and it completed successfully, but then I was unable to upgrade FirePower modules - I was getting error. So, I did it manually w...

I am getting the following alerts and cann't figrue them out: [119:4:1] http_inspect: BARE BYTE UNICODE ENCODING [Impact: Unknown Target] From "10.x.x.x" at Tue Nov 24 18:48:29 2015 UTC [Classification: Not Suspicious Traffic] [Priority: 3] {tcp} 9.1...

I understand the ASA sip inspection is enabled by default on its service policy. Can I disabled it and not causing any problem?I noticed the ASA does has sip session transit through it.ciscoasa(config)# policy-map global_policy ciscoasa(config-pmap)#...

Cisco 5505 ASA Inside subnet is 192.168.0.x netmask 255.255.255.0, ASA address on the inside: 192.168.0.40 Outside: The 5505 ASA has one address on the outside: 192.168.125.250 netmask 255.255.252.0   (i.e. /22) There is a time server at address 192....

Hi, I am having some issues with my ASA5505, and an ADSL connection. I make the setup without problems, configure the ADSL settings, nat for browsing, etc. All is working exept for the port NAT from the outside ( ADSL with dynamic ip interface), to a...

I am trying to mainatain a 5505 firewall from my office Mac OSX, using the ASDM java application.However, it refuses to run after I upgraded to the latest OSX version 10.10.1 (Yosemite)When activating it the system says I need to get the Java Runtime...

Hello, my network scenario is like this ;  Dhcp is configured in core switch. Core switch is connected to ASA and ASA is connected to the ISP cisco switch . In the ISP switch , the port for internet is configured as DHCP . So I configured the wan por...

Hello All, I recently saw a config I am trying to understand.  Firewall in front of 6807 Switch.  There was a vlan on the 6800 with a public IP address but the next hop was the inside interface of the ASA which was a private IP address.  Then the ASA...

HI , I dont know if anyone came across about to block icmp tunnels with asa. https://n0where.net/icmp-ip-tunnel-icmptunnel/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+n0where+%28CyberPunk%29 Just trying to search if ASA can detect it ...