Network Security

I am in the process of ordering numerous ASA firewalls up to the 5585X models complete with IPS I just found out that Cisco is now using SourceFire/Firepower for these, and is probably going to discontinue the old system. I don't see a whole lot of d...

So back in the old days when IDS/IPS was a module for the ASA it had its own Ethernet port for management. How is management done now with the new platforms and Fire Source? I heard something about the ASA management interfaces are used for some kind...

Device – ASA 5512 running 9.1(1). Show version: ASA-1# sh ver Cisco Adaptive Security Appliance Software Version 9.1(1)Device Manager Version 6.6(1) Compiled on Wed 28-Nov-12 11:15 PST by buildersSystem image file is "disk0:/asa911-smp-k8.bin"Config ...

Hi, I already have an ASA5512-X and would like to implement IPS. I'm aware of the license needed, however I cannot find anything that says if I need the subscription service. The IPS bundle says it includes the service, but there seems to be a contra...

I'm trying to evaluate Cisco Security Manager 4.7.  I was given a Windows 2012 R2 server to install it on but now I see that the CSM installer fails and tells me "Windows 2012 R2 Datacenter is not supported".  Windows 2012 Datacenter 64bit is suppose...

Hi,Can we have 2 pairs of ASA firewall on same subnet. Like we have two loactions with two different pairs of ASA Firewalls , User wanted to user same public subnet for the both locations , can we use the same. ------------------INTERNET ------------...

I have this config and it works great.....router ospf 1 router-id 1.1.1.190 network 10.200.200.0 255.255.255.0 area 0 network 1.1.1.190 255.255.255.255 area 0 network 192.168.36.0 255.255.255.0 area 0 log-adj-changes detail redistribute static subnet...

Hii.I got issue regarding ASA 9.1 NAT. I have 3 networks on 3 dedicated interfaces. I want to give internet access via WAN interface only on port 80 and 443 for those 3 networks. I also want to access some services (443, DNS, GRE etc..) on specific m...

I have a security camera server with a web interface that formerly used a port forward in the service provider's modem/router to allow access to this interface from the internet. A 5505 ASA was installed after the modem to create a VPN to allow remot...

I have a requirement to allow 2-way trusts between AD domains for a corporate changeover.    My firewall for this connection is a zone-based firewall on a 2921.    My question is, do I need to open every TCP port between 1024 and 65535 as per Microso...

Hello See diagram for topology Currently I have a single Internet link. Natting is done in my ASA 5520.I am moving to a Dual internet link.     Natting will be done in the ASA 5545 x on the side labeled Site_1 for internal DMZ servers (services)     ...

Looking at implementing IDFW by vpn authentication, http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/access_idfw.html#wp1372180,The ASA reports users logging in through VPN authentication or a web portal (...