Network Security

Hello. on cisco ips how to put interface pair in promiscuous mode? when two interfaces are in promiscuous mode the traffic is not forwarding

We currently manage a multi-tenant environment where we provide each of our customers with a virtual firewall context. At the moment we are having to keep a spreadsheet per customer with all their firewall rules so that they are able to see what rule...

in sourcefire if sensor can't reach to Defence center. Are events are stored on sensor ? and i want to  know the limit the sensor can stored events ?

Hi, we have to migrate an old ASA 5510 (8.2.x release) to a new 5508X. We can't migrate the old system to 8.3 or higher because of memory limitations.Are there any cookbooks, best practices e.g available to support the migration? We are using a lot o...

Greetings-I just set up VPN remote access on our ASA and was wondering if it was possible to keep a VPN session (SSL or IPSec) persistent after a reconnect?For remote users with unreliable wireless connections, they want to have the ability to mainta...

Ive been pretty patient and tolerant of ASDM and Java over the years, however its now at a point where it is impacting my work so severely that something has to change, im sure I am not in this boat alone. I am a managed service provider, and I manag...

I'm trying to ping outlook.office365.com from inside through an ASA 5505.  I found this in the log: 4 Aug 12 2015 16:06:41 106023 132.245.23.146 x.x.x.x Deny icmp src outside:132.245.23.146 dst inside:x.x.x.x (type 0, code 0) by access-group "outsid...

HI experts, i have a consideration creating a some load balance through ASA using NAT features. but i am getting stuck in one place.                                                                          (outside1) WAN1   ---------         ------ V...

Hi,Scenario: Mail Server in the Inside NetworkMail server IP Add: 10.34.1.10 and Nat IP: 201.1.1.5Configured Access list and objectnetwork.object network obj-10.34.1.10  host 10.34.1.10object-group service tcp_lotusnotesgrp tcp port-object eq www por...

Hi,I cant seem to png from dmz to outside - i get the following outputnat (dmz,outside) source dynamic any interface timeout pat-xlate 0:00:3012asa01# packet-tracer input dmz icmp 192.168.0.10 1 1 4.2.2.2 detailedPhase: 1Type: ROUTE-LOOKUPSubtype: Re...

I am looking to buy a couple of asa5512-dc-k8 to run in active/failover mode. Does anyone know why you cant but a DC box with K9 encryption? It just doesnt make any sense to me. Couldnt I just load K9 software on it? thanks!

Hello all, Do the Cisco ASA 5512x support native failover to 1 of 2 WAN ports? For instance, if I have ISP A configured on one WAN and ISP B configured on the other can I program the ASA the automatically recognize if one link on a WAN port goes down...