We have two Cisco ASA 5545's fronting our Internet traffic a lot of it comes from Akamai. Because we use a CDN if an attacker uses them to start an attack the ASA is seeing an IP from Akamai that is allowed. Can the IPS or IDS read the X-Forwarded-F...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(85) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,512) -
Cisco Bugs
(31) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(140) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Management Center (FMC)
(8) -
Cisco Secure Firewall Threat Defense (FTD)
(7) -
Cisco Security Cloud Control
(1) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(17) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(25) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,567) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(319) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(90) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,553) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,772) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(625) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
hello guys,were can i get a signature file for uploading it in the isp Module.Is it possible to see the status which, or if a signature file is loaded ?,or can this only be done after configuring a sensor ?The unit was bought as ips version, with pr...
Hi,I recently came across a peculiar cisco asa fail over issue where the device failover occurred when some of the interfaces went down even though the interface were not configured to be monitored.I have verified the below mentioned possibilitiesa) ...
We have had a single ISP for years with a public address space 203.xx.xx.xx/24, now we have just got another ISP with a 220.xx.xx.xx/28 address spacenow when I do my natting I obviously want the appropriate public address to go thru to the correct ...
Hi, I have a single host that I want to static nat a number of services to. I want to use service object groups to simplify commands. I guess the beginnig is:object-group service OG-SERVICES-INSIDE-MYSERVER service-object tcp destination eq ftp servi...
So, I have been presented with an interesting challenge. I would prefer using an internal Linux host to solve this, but my manager is convinced the ASA can do this. Hope this is the correct group. This is a NAT and routing question.We have two VPN tu...
I have 2 ASA 5510's in a failover bundle. I have a weird issue right now, where a site (https) is apparently getting blocked behind the firewall. If I browse to the site, it just spins, then says the page could not be displayed. I can ping the IP ...
I wanted to get some feedback on how the rest of you security folks are doing web content filtering. The CX does a great job with HTTP but when it comes to HTTPS it leaves a lot to be desire. When the CX first went live, it was configured to decrypt ...
Hi, I have a Cisco SG200-26P PoE Smart Switch. I am getting security issues as a vulnerability: CGI Generic XSS(Parameter Names), a solution was provided saying it needs to be patched or upgraded. My switch firmware is updated to the latest Version 1...
Hi I have issue with NATing , I have ASA 5025 x and i make static NAT for some servers and some users to access internet , also i have another branches i need to access it by my private IP , the nating to internet working fine but i try to make nat e...
Resolved! Cisco FWSM 'deny inbound' error in ASDM
Hello We have an explicit rule allowing inbound traffic, however it recently stopped working. The rule is still in place but we get a Deny message in the logs and the traffic does not pass. Would NAT have an affect on this? Someone changed the NAT fr...
While configuring a DNS Inspection Policy Map, To match a specific flag that is set in the DNS header, the following command can be used:hostname(config-cmap)# match [not] header-flag [eq] {f_well_known | f_value} I want to configure NTP Inspection ...
I need to check whether Sourcefire IPS support MQTT or MQTT over SSL TCP protocol in terms of detection of intrusion events, network discovery and etc.
I've searched and searched and have found similar issues, but confusing answers. I have two ASA 5505 appliances running base licenses. I learned this the hard way when I put them into production and discovered random communications issues. This is wh...
We have a VPN setup with EasyVPN with a requirement of secure unit authentication. We are having intermittent issues with it. Sometimes the client ASA will boot up and appears to attempt negotiate the VPN connection. Other times, it comes up fine...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
Top Solution Authors
| User | Count |
|---|---|
| 11 | |
| 6 | |
| 4 | |
| 3 | |
| 1 |
