Network Security

I've discovered a bug in the newly added SGT option when running a packet trace using ASDM. When you do not want to add or use the SGT number (leaving it unchecked), the command sent to the ASA5555 includes invalid syntax:packet-tracer input outside ...

Hi,I have an ASA 5510 with software version 7.0(2) and would like to upgrade to a newer version as to enable Gigabit functionality on the interfaces. Is there an upgrade path that I must follow before moving to a newer version such as 8.3(2), or can ...

Hello,I have a customer who wish to replace an old 7200 router that supports the following services:- 5000 static nat with support to 15000 nat translations in the near future.- Around 125 Mbps of bandwidth throughput- 200 VRFsThis customer wants an ...

I have seen from my fail2ban logs that my servers (ssh in particular) get hammered daily on my dmz from external sources trying to brute force.I would like to block certain ranges of the highest offending ones.  How can this be achieved on the 5505?E...

I have cisco ASA firewall, a Cisco router and a cachebox,  the cisco router is connected to the inside interface of my ASA  which connect directly to my inside network and my ASA is facing the WAN interface. the cache engine ip is 192.168.1.18 and my...

 Dear Support, Currently, I have configured VPN site to site between two ASA ( Branch A and Branch B ). Normally, VPN site to site always permit full range of ip address in interesting traffic ( Access-control-List ). But for my scenario I want to al...

We had a problem with SMTP inspection dropping some regular emails (Cisco 2901 IOS 15.0).The original configuration, made using CCP, was:access-list 102 remark CCP_ACL Category=0access-list 102 permit ip any host 192.168.1.111class-map type inspect m...

Hi,We have  pair of 5585-X running 9.1.x with multi-contexts and IPS SSP60 modules on both ASA. Currently only two contexts are created and both are in failover group 1. While doing failover tests we noticed that once the secondary ASA is active and ...

Hello,I am well aware as how to create policies in the ASA for specific hosts or IPs but what I want to do is create a generalized policy that gets applied to all users on an interface but at a per-user level.For example, I want to have all users on ...

For the last one month we have been hit by DDOS attacks that seem to be using SSDP (Port 1900 UPD). It’s just happed today and it lasted 15 mins…during which time our internet connection (Comcast Business line. 100/20 MB) came to a crawl. No one coul...