Network Security

Does anyone know if the is a way to monitor the traffic that flows through the FWSM (maybe a tool or a utility)?  For example, we would like to see how much traffic flows through the FWSM by day.  We know that you can use the show traffic command but...

Hi, I am seeing an unusually  large number of connections (close to 1 Million) on Firewall.. I am not sure if this connection is initiated from outside or inside. It seems large number inside machines trying to reach some outside addresses from conne...

Hello,I upgraded our Cisco ASA 5505 to the latest ASDM through the upgrade wizard in ASDM but after the upgrade I can't get in to the "Configuration" tab in ASDM anymore. It's stuck on "Validating Running Configuration".I have Java 1.8 and ASDM worke...

I wonder if anyone else has had this. Everytime I want to use ASDM I have to download and reinstall or it can't connect to the ASA! This is driving me crazy...

I am trying to setup our ASA5520 V7.0 to resolve DNS.  multi context mode. We have names defined but also have have set dns servers in the config and it seems that the server does not recognize that it needs to be using external dns provider.    host...

I have a 5510 in transparent mode that works as designed.  I can access the management stuff from the inside interface (ssh, telnet, and asdm) no problem, but when I add an entry for my IP range for our office so I can get into it without having to d...

Hi folksI have an ASA 5505 running 9.2(3) managed through my CSM 4.8 server. Everything has been going fine until I added failover, after that every deployment fails at the point below. Line# 30. (SUCCESS) Sent (Fri Mar 20 12:10:12 EET 2015): interfa...

Hi Team,Currently we are using SSL3.0 of firewall for exposing one of the intranet portal to outside users. We want to enable TLSv1.1 or 1.2. According to the output ssl server-version , we have only these options:any, sslv3, sslv3-only, tlsv1, tlsv1...

Hi,In a mysterious way I lost CLI Admin password in whole my ISE deployment (6 PSN, 1 ADM and 1 MNT node). I wondering how it is possible? Last time I logged to the nodes when I upgrade my deployment from ISE 1.1 to 1.2.1. Is this possible that I cou...

HiInterface INSIDE set to 100Interface OUTSIDE set to 0Application using port 11024 TCP/UDP is not going out.Do I need to create a separate NAT statement?I thought all ports are open going from High to lowRegardsStan

ref: http://www.cisco.com/c/en/us/td/docs/security/asa/api/qsg-asa-api.pdf   In the above document, there is no mention about multiconext.  Should the agent go in the system context, or each admin context.  There is also no mention of contexts being ...

Hi there ,i places ASA5545 is os 9.1 in two switches in transparent mode however  it seems some problem in my configuration.  <inside switch1>----------------------------ASA---------------------------<outside switch2>172.16. 10.10                    ...

Hi All,I have problem with upgrade 2 of Cisco ASA (Fail-over config) to software version 9.0.4I'm find BUG CSCut18717 on standby unit.Please recommend me about software version can fix this BUG.Thank.