Network Security

I have an ASA that is running 9.1(1)I have customers that use an application that goes to my outside IP address using TCP port 15678 and redirects it to a server in the DMZ with an IP address of 10.2.1.22. Here is the configuration for that to happen...

When implementing FirePower services on an ASA and managing it with FireSight in an enviroment with existing ACL's and NAT statement on the ASA, will creating access control policies and nat statements through FireSight take precedence over the local...

Hello,In preparation of migrating/upgrading our CSM installation to a new server I attempted to run a backup of the databases based on the upgrade guide. I ran into an issue and the backup fails each time when trying to open the rpt database. The err...

Hi all,I am trying to upgrade code on an ASA5520 with 512MB of RAM and 256MB of flash. I found that the most recent version I can use with this hardware configuration is asa8.2(5)58.  I was able to upgrade one of the pair just fine but the other one ...

Hello, I am setting up an ASA5515X running ASA 9.2.2 with ASDM 7.3.1. I have asasfr-5500x-boot-5.4.0-763.img running on the ASA and I'm trying to upload the asasfr-sys-5.4.0-764.pkg via ftp and I get the following error: Verifying.... too many values...

Hi,I'm trying to understand ACLs and Security levels. I have a asa 8.2 (5) with three interfaces with security level 0, one with level 75 and one with level 100.  The 75 use to be 100 but i needed a new interface and more secure so I changed the 75 t...

I recently replaced an ASA 5510 with a new 5516x. I was able to successfully migrate the SSL identity certificate (using the "crypto/import ca export pcks12" command) to the new unit. I also installed the intermediate certificate. When I navigate to ...

Hey all, I currently have 3 ASA5510's (versions 7.2(3), 8.0(4) and 8.2(1)) which fail to reply with the description value I added on the interface.I noticed the problem through our Cacti graphs and then checked with snmp-walk.I've tried both v1 and v...

Hello everyone! I currently have a 50mb down package from my provider. I noticed when doing speed tests (I know they aren't the most reliable) I am getting about 25-30mb/s when going through the 5505. I then "removed" my 5505 and I went through my Ci...

Hi, We have multiple ASA 5505 installed on different locations. Now we assumed that we need to have IPS feature which is not inside in ASA 5505. Now we are planning to go with open source package SNORT (IPS Solution). Can anyone tell me how its diffe...

Hello,I've configured LDAPs AAA server Group on Cisco ASA. Testing authentication I got the ERROR: Authentication server not responding. That is why, below is the log with TCP Reset-I. 302014 192.168.100.145 636 192.168.100.254 44851 Teardown TCP con...