Network Security

I understand that as of ASA 9.2(1) that BGP is available on ASA. This isn't really a specific question but I wanted to know about people's practical experiences of deploying this. Are there any limitations etc..

ForumI am working for a client today whom has a legacy ASA 5510 platform.  I am configuring sub interfaces on the interfaces on the appliance.Do the subinterfaces that I create inheret the security level of the parent physical interface?  In other wo...

Failed auto update on ASA-SSM-20 The host is not trusted. Add the host to the system's trusted TLS certificates.   errorMessage: WebSession::sessionTask TLS connection exception: handshake incomplete.Messages, like this one, in the category - TLS con...

Hi everybody,  I have been having issue on updating the signature of our IPS Device. I can download the signature from the URL below at 72.163.7.60 which tells us that our credentials is working. However, when I tried to update via the "Auto Update" ...

Need to create access lists for the match statement in the class-map global-classto not allow http inspection for VPN users and for the Site 2 Site locations going to the internalsubnets but all traffic going from the Internal subnets to the internet...

Where do I find the zip file disable_sslv3.zip mentioned in bug CSCur29069?        2) Extract attached disable_sslv3.zip to CSCOpx\bin directory. There's nothing attached to the bug and I also do not find it at CSM software downloads.Can anybody help...

I have the below config on ASA 8.0 I need to convert it to 9.2name 10.2.17.80 BV-DVRname 10.2.13.80 SE-DVRname 10.2.23.80 ES-DVRname 10.2.10.80 NW-DVRname 10.2.10.81 NW-DVR2name 10.2.1.76 C-DVR1name 10.2.1.78 C-DVR2name 10.2.1.80 C-DVR3name 10.2.19.8...

Hi There, I have an issue with a Cisco ASA firewall showing TCP reset-o and deny messages for server replies for hosts which have initiated the connection. the firewall says it can't find the connection on the table but it does show the connection go...

i have cisco asa5512-x fw ed with basic license. i need to add IPS to it.do i need module or only license or both? and i have another cisco 5520-k9 with security plus and also need to add IPS to it?

Hello All,May I know if Sourcefire can inspect traffic tunneled in EoIP ? We have a wireless guest network traffic which is passing through EoIP tunnel (between WLC and guest anchor controller), is it possible to inspect such encapsulated traffic ? R...

hi all,i'm going to configure SNMP on our ASAs to be monitored on solarwinds' orion.could someone advise what SNMP traps i can enable without affecting the ASA's performance (not too chatty) and just for basic monitoring stuff?also, are these the lin...

I originally setup my phone proxy using this guide: http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/unified_comm_tlsproxy.html Phone would register but there was no audio. Along with allowing tftp...