Network Security

I was playing around with URL logging on an ASA 5510 the other day. Pretty neat. But I was wondering if you could do a similar thing with DNS queries. I setup a regex to match anything and setup a class that referenced the regex. Then, I created a DN...

I recently upgraded a ASA 5510 from 8.2(1) to 9.1(4). I went the path of 8.2(1) to 8.4(6) to 9.1(4).Ever since, I have been getting the error %ASA-0-106100.The ACE referenced is access-list outside_acl line 4 extended permit udp any4 host 10.x.x.x eq...

I had dual isp configuration setup that was working fine in 9.3.1. Once the primary ISP line goes down, the second one would take over and once the Primary ISP line came back the Primary default route would be in place and everything worked fine, UNT...

Hi all!Is it possible to configure ISE 1.3 for provisioning AnyConnect 4.0 and pushing certificate (as by using native supplicant)? So, after that, AnyConnect will be able to use EAP-TLS and cert for network access.It will be great, if it is possible...

Hi guys, I'm beating my head.  I have this working perfectly at one site, and it won't work at another.Scenario:Site has a new external vendor coming in.  Vendor has installed a router on the internal network going to 172.16.207.187/32 (on the other ...

I am looking for a way to filter out all SSL Downgrade attempts for traffic passing through my FWSMs and/or ASAs. This traffic (the request to downgrade to a weaker cipher) is sent in the clear so this should be filterable by a FW somehow. I found th...

Hello,I have a customer with power issues in DC and two ASA5585 in cluster. The problem is that when there is a power outage the ASA cluster power up but the member are disconnected of cluster and need join into the cluster manually by console connec...

I have purchased Cisco ASA5512X  firewall installed but now we want to purchase some additional feature subscription like - IPS , Antivirus and others . I want to question this model is supported additional subscription  ?  

Please evaluate if the signature (6322) Microsoft Windows Information Disclosure Signature is OK as it seems I am receiving lots of false positives alert.

I know there is a way to have context explorer display hostname's in Context Explorer.  For example, in the 'Traffic by Source IP' part.Let me know if you need more information in what I am trying to do.TIA,Dan

Hello All, I have HA PIX515E and Version is 7.2(2). but the HA is not working recently.the primary firewall Unable to sync configuration from Active. the interface status is wired.outside and inside interface are down, protocol up. but the switch whi...

Hi All, Say I have a setup as below Host1--(inside)ASA(Outside)----R1(192.168.1.1)---R2(172.16.1.1)---R3(Host2) We do a tcpping to the destination say to port 80.We will know whether the host is alive as it will send an syn-ack to us. Noe say I have ...

We recently introduced two new ASA 5512 firewalls with IDS module in our infrastructureThe IDS module can only be managed through a web interface. Now I need to whitelist a couple of IP addresses for PEN testing purposes.Traffic from these addresses ...