Network Security

  We've implemented (or tried to) a rate limiting policy to drop http/https packets that exceed 4meg although it doesn't seem to work or have any impact on internet downloads as users are still able to download files and consume the full amount of ba...

Hello,I have planning the deploy ASA while it have problem that there are parts of user with private IPs require NAT to Internet.  And some of them using public IPs will directly assign to user.  I would like to check is it possbile they managed with...

Hello, I am working for translate firewall from to ASA now.  As I know ASA did not support secondary interface IP.  However, my existing firewall setup is using this method to bind different subnet into single Interface.  Did any best practices to mi...

Hi,I have a cisco RV082 vpn router . i tryed to filter web sites tru router i can block http web sites but i cant block https sites  ex  i can block http://facebook.com but i cant block https://facebook.com so how can i block https websites ? 

Hello all!Currently, we have a single Cisco ASA 5505 device protecting our network. It has an Unlimited User Base (non-Security Plus) license.We would like to add an additional ASA 5505 device for redundancy, in an Active/Standby failover configurati...

Hi Guys, Ive made a silly error in that I have put a encrypted password and username on my ASA and didnt write either down therefore I cannot log back in to the box..thing is all the config on there is fine and working therfore I dont want to rest th...

I am trying to get the basic configuration set up for my new ASA 5512-xI have the Comcast fiber --> copper fed from the ciena switch port 1 into the ASA Eth(0)I have a laptop plugged into Mgmt PortI have a laptop with DHCP plugged into Eth(1) I set u...

I am changing the way Vlans access the CORE network. Currently: The ASA interfaces connect to the DMZ switch stack via trunks. The DMZ switch stack has a trunk to the CORE NetworkSeveral of the sub-interface Vlan(s) on the ASA do not get trunked to t...

Hello, I am new to the ASA world so if there is a better way to do the following I would appreciate any suggestions. I need to capture what type of traffic is leaving our network on a daily basis, this should include source and destination ports. I w...

ASA evaluation of SSLv3 POODLE vulnerability at https://tools.cisco.com/bugsearch/bug/CSCur23709 only mentions ASA 5500-X but not ASA 55xx appliances and ASA SM. Does this mean ASA 55xx appliances and ASA SM are not affected by the vulnerability?