Network Security

Hello, We are running out of IP's. I created a superscope on our Microsoft DHCP server, 192.168.1.0-192.168.3.254We have an ASA 5505 no router, and L2 cisco switches (SG300)Clients get proper IP's from DHCP, but can not communicate between subnetsI c...

I'm running into an issue with the Sourcefire management system. When I try to delete a user agent within Sourcefire I get redirected to an error page.Running 5.3. I have attached the error.

Hi!I have a weird problem: some subnets behid fwsm are not workig.For example: I have a subnets called "SFPRD-Business_GxP" inside the firewall. When a server on this network tries to reach another server (in this case 172.10.2.142) on the Outside in...

# 32400 to 10.0.1.114 - am I missing something obvious? Thanks, David : Saved : ASA Version 8.2(5) ! hostname ciscoasa enable password 8Ry2YjIyt7RRXU24 encrypted passwd 2KFQnbNIdI.2KYOU encrypted names ! interface Ethernet0/0 description WAN swi...

HiI don't see any traffic information for one of my interfaces:interface GigabitEthernet1/2 description outside media-type sfp nameif outside security-level 0 ip address 152.88.1.15 255.255.255.0 standby 152.88.1.115 ipv6 address 2001:620:d::2/64 sta...

Hi Experts, Good Day! I have an ASA5585-X SSP IPS. Each module SSP and IPS has Ethernet ports, does those ports dedicated to the ASA and to the IPS or all of the ethernet ports are controlled by the ASA even though it is located in the IPS module? Al...

I need to add a 1G interface to a 5585-40 that currently has two 10 gigabyte SFP's installed in slot 06/08Can I use SFP slot for 1G in slot 05/07 next to one in slot 06/08 that is configured to use 10g? Do both SFP slots in the pair need to be the sa...

We have a cluster of two ASA5585-SSP60. One Master and one Slave. From NNM the boxes are polled with v3 on their individual interface address in context admin. The Master is OK with SNMPv3 and returns replies, but the Slave says "Authentication Failu...

Hi all, I have a fixed ip and I am under attack by a brute force / hammering on port 3389 for the Remote Desktop Connection.I want the CISCO 5505 to detect the attack (for example if they try 5 connections in 3 minutes) and then to ban / shun the att...

Hello All,I am trying to get a better idea of how to improve security between my MPLS sites.I currently have 10 MPLS sites sharing a 100 Mb backbone, each location is connected physicallyusing a L3 Switch provided by the Telco. I simply plug that L3 ...

Hello Forum. We have about 12 different VLANS behind an ASA 5515-x. One of those vlans contains a webserver and a DNS server (different machines, different IP addresses). ASDM 7.1.3From outside the firewall, people need to be able to get to the webse...

First I am new to ASA. Second, I have come across this configuration where 2x5525 ASA's are setup in active standby. But I am little confused how this is setup. For active I am doing ssh to 10.0.0.24 and for standby 10.0.0.23 Both ASA-active and stan...

This is easy. I am not being forced to accept an ASA design,, but I have been told about a design that an external vendor wants to dump on my company & I need reasons to fight it before its implmented. You won't believe this but its true. There an AS...