Network Security

It is very interesting and tricky. ASA5520 has four 1Gbps interface but the box itself only support 450Mbps (According to datasheet). How to explain this? Does this mean if the interface receive 1Gbps traffic, then firewall will drop the packets? Th...

I've seen some tools for converting ASA's to PA... but not the other way around. Anyone come up with a good method? (scripts, tools, etc?) Thanks in advance!

I am looking for some information on the ability to write Zone Based access Control rules using the Sourcefire on ASA module. I can create ASA security Zones which it looks like basically just associate the interfaces on the ASA with a security Zone,...

Hi, Getting below error while trying to console CX module from ASA.HQ-JNM-ASA/act# session cxsc consoleERROR: An existing console session is in progress with module cxsc. Only one is allowed at any point in time. Have tried resolving the issue throug...

Hello everyboy,I have the following topology, DMZ Network -> ASA (Active/Standby) -> Two Routers Cisco 2951 -> Two ISP Mi question if there  is a way to truly get load balancing for the inbound traffic to one server, so the server can respond request...

Hello,There are many log related to following"%ASA-4-401004: Shunned packet: IP_src ==> IP_dest"I would like to know more details which threat detection rule was hit? It will useful for me to adjust its Treat Dedication  setting.Since "show threat-de...

Hi everyone , can you please till me what is the temperature OID for the ASA to be monitor by SNMP server

Hi ALL,I met a strange issue about ASA 5540 telnet issue ,I can telnet FW successfully ,but after i log in a few minutes ,FW will be no response ,then the telnet will interrupt .  It's very strange ,I checked CPU ,Memory ,logs ,everything looks fine ...

Hi there, I have a couple of questions regarding Reset-I and Reset-O messages on the Cisco ASA.  I read a document that Reset-I will appear on the ASA if the inside host resets the connection, but what denotes an 'Inside' host?  Is the inside host de...

I'm running a pair of 5525-X's in A/A Failover but I have just bought some VPN licenses.What I didn't realise is that I can't configure AnyConnect in multiple context mode.I'm only using one context so I essentially want to convert to an A/S pair. Wh...

Tried setting up a Shape Policy and it states its invalid.  Worked fine on my 5520, just curious if anyone else might know why its coming as invalid now                          ciscoasa(config-pmap-c)# shape                                          ...

Recently purchased an ASA 5512-x with FirePOWER services.  I am having trouble downloading the FireSIGHT management virtual machine because it says that I need additional licensing requirements to do so.  I have tried registering the Control License ...