Network Security

Hi all, Want to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption and disable MD5 and 96-bit MAC algorithmsASA version : 9.1.5(21)Any idea. Regards,Bala

Hello. I am labbing up Failover on 2 5505s and I have got it working but not the state full side of things. The option of using failover link seemsTo have disappeared. Ive wasted a day looking hence this post. Any help appreciated. 

Hi, I would like to ask how to translate/permit specific host on firewall.on 8.2ver I used nat (inside) 1 ipofhost and subneton 9.2 ver it notworking?do i need to create a net object network for the spefic address to be allow?please see the attached ...

Hello. on cisco ips how to put interface pair in promiscuous mode? when two interfaces are in promiscuous mode the traffic is not forwarding

We currently manage a multi-tenant environment where we provide each of our customers with a virtual firewall context. At the moment we are having to keep a spreadsheet per customer with all their firewall rules so that they are able to see what rule...

in sourcefire if sensor can't reach to Defence center. Are events are stored on sensor ? and i want to  know the limit the sensor can stored events ?

Hi, we have to migrate an old ASA 5510 (8.2.x release) to a new 5508X. We can't migrate the old system to 8.3 or higher because of memory limitations.Are there any cookbooks, best practices e.g available to support the migration? We are using a lot o...

Greetings-I just set up VPN remote access on our ASA and was wondering if it was possible to keep a VPN session (SSL or IPSec) persistent after a reconnect?For remote users with unreliable wireless connections, they want to have the ability to mainta...

Ive been pretty patient and tolerant of ASDM and Java over the years, however its now at a point where it is impacting my work so severely that something has to change, im sure I am not in this boat alone. I am a managed service provider, and I manag...

I'm trying to ping outlook.office365.com from inside through an ASA 5505.  I found this in the log: 4 Aug 12 2015 16:06:41 106023 132.245.23.146 x.x.x.x Deny icmp src outside:132.245.23.146 dst inside:x.x.x.x (type 0, code 0) by access-group "outsid...

HI experts, i have a consideration creating a some load balance through ASA using NAT features. but i am getting stuck in one place.                                                                          (outside1) WAN1   ---------         ------ V...

Hi,Scenario: Mail Server in the Inside NetworkMail server IP Add: 10.34.1.10 and Nat IP: 201.1.1.5Configured Access list and objectnetwork.object network obj-10.34.1.10  host 10.34.1.10object-group service tcp_lotusnotesgrp tcp port-object eq www por...

Hi,I cant seem to png from dmz to outside - i get the following outputnat (dmz,outside) source dynamic any interface timeout pat-xlate 0:00:3012asa01# packet-tracer input dmz icmp 192.168.0.10 1 1 4.2.2.2 detailedPhase: 1Type: ROUTE-LOOKUPSubtype: Re...