Network Security

HI, wondering if anyone can helpI want to write an EEM script to warn me via syslog when a certificate is about to expire on an ASA firewall (ideally covering the root CA, Encryption and ASDM Launcher certificates), the only part I cant find is the O...

HiI am supporting a Cisco ASA 5510 that drops internet connection intermittently. when this happens the outpound interface still shows up. A "debug arp" when the problem is occuring shows the followingarp-req: generating request for <ISP GW Address> ...

As title suggests,Can I have a setup like this: interface GigabitEthernet0/0 description physical port no nameif security-level 0 no ip address!interface GigabitEthernet0/0.100 vlan 100 nameif internal security-level 0 ip address x.x.x.x!interface Gi...

Hi there, I have a Cisco ASA 5505 running at my house. It has been running fine for the past year but lately the outside interface seems to be failing. Basically my internet connection seems to be going down, all internal devices are still able to co...

Hi,I am implementing sourcefire IPS for the 1st time in life and have a few basic questions that I couldn't find answers in the documentation.1. I was able uninstall IPS module and load boot image for SFR and console to the sfr module. Now the setup ...

I have a fairly standard configuration on a ASA 5510 with 8.4(7) software.One windows server 2008 R2 on the inside attempt to make a backup of its MSSQL database to a offsite backup vendor, but when it goes over the firewall it keeps dropping the con...

Hello, Which signature, and how can I tune it in order to avoid a brute force attack on my Anyconnect VPN which I use Active Directory Authentication?

Having a problem  Trying to setup an 5520 ASAI can get the static route 0.0.0.0 thru the external interface to work fine. System accepts it with no errorsWhen I try to setup other routes,  say a route to my lan side network, I keep getting the error ...

I feel as though I've tried many options to get NATing and my ACLs to work correctly to provide external access to my internal security cam.I've included a layout of my network in hopes it can help.My internal to external is working fine and I can ro...

We get a lot of "Deny protocol reverse path check" log error messages from our Cisco ASA's to our QRadar SIEM related to IP Spoofing attacks from our Cisco ASA's. I've been reading up on this, and if I understand correctly, I can tune t...

Dear Allwe get a very slow throughput of ssh traffics for example SSH, SCP and SFTP through FWSM.i removed the inspection and test again, but nothing change, very slow performance.What are the reasons?thank you

Hi,I am running FWSM code 4.1(14) on a pair, The problem happened on a reload and translation stopped working. I did a 'clear xlate' but it made no difference. Removed and reinserted 'global' still no difference. Removed and re-inserted 'nat' , natti...