Network Security

Our Security Team is Reporting vulnerability related to SSH Weak MAC Algorithms Enabled for one of my WS-C3750G-24TS-1U switch.As far as i know user will send the required negotiation cipher to access the device and device is just accepting it.Also i...

hello everyone i am kinda new to cisco product, i have cisco asa 5510 as firewall, i was trying to block some site using the link provided belowhttp://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml#tshootand ...

Since replacing a dead ASA 5505 w/another ASA and running the same image and config the user is having issues getting to one website and only one website. Packet tracer and logs show a connection opening up but then closes in about 12-14 seconds. The...

Hello Everyone, I am little bit confused between stateful firewall and how it works. I know that stateful firewall keeps track of the connections initiated by internal network or from the outside network i.e internet. So does that mean if the connect...

How to tell if a firewall is killing a session? If I have a tcp connection between Host A and server B with a firewall in between, lets say its ftp, and the user reports the ftp session is disconnecting how do we prove what is really going on. Lets s...

To summarize, we are trying to implement a FirePower 5.4 virtual appliance on a VMware cluster. The device is placed between a load balancer and 4 application servers.  -          Whenever all devices reside on the same ESX host, the traffic flows be...

Hi!I would like know about the Firewall Device selection. We are mid-sized business with 5 Servers and 15 Switches network. We are planning to have a web server/database server in house. I need guidance to choose a firewall device that can protect ou...

Hi,how can apply  route-map rules to an interface ?i set up some rules but i cannot apply these rules any interface.Thanks a lot.

Subject is intact.I found something interesting while trying to perform a process.To be filtered by the ICMP protocol, where the ACL and Firewall, was that you should not use it.But no matter how these ideas to Google, there was no answer to this.Ple...

Hello, I have a cisco 5550-X withsame-security-traffic permit inter-interfacesame-security-traffic permit intra-interface options configured.There are not ACLs configured either.IPv4 traffic flows fine but I'm having troubles with IPv6. (OSPFv3 is no...

Hi,I keep it very simple.We already have a Site-to-Site tunnel from our datacenter to one of our clients, and it's working fine.Our client wants to build standby tunnel in case the Active tunnel goes down.Both tunnels have different service providers...

We have an ASA 5515 with SourceFire and the Virtual Defense Center. We have loaded the URL Filtering and Malware licenses but we are unable to locate the PAK for the Protection license. Is this a separate license and if so what is the part number?