Network Security

HI, If my Customer buy an ASA5512-K9 and he want to add IPS module into the ASA, is it possible or do he need to replace all of the security Appliance. Also what are the alternative to provide IPS tp an ASA5512-K9 via the web with firepower Thanks  

I know this is a little out of scope, but was hoping someone would have some insight.I have two Checkpoint firewalls connected to Cisco Nexus 5548UPs 10G. I am noticing a lot of dropped RC on the Checkpoint interfaces. I'm wondering if the firewalls ...

Hello ForumI am with a Customer today whom has purchased 2 ASA 5515-x next gen's.They are desiring to have an Active /Standy Failover Pair.When I perform a sho ver on both of the appliances, I can see that they are both licensed for Active/Active. Si...

Hi My 1801 router (IOS 15x) is using the original self signed certificate (1024) with an signature algorithm MD5. I would like to change the cert to a 2048 key length , with a hash of SHA1 or better but I'm unsure how to do this.Should I just generat...

Hi, Our problem is that we need to test macsec-trustsec for show one of our customer the functionality. Cisco sent  us several 3750 and 3560 to try. with C3KX-SM-10GT: moduleWe don´t understand that 3750 have the ios right and some command we can´t t...

i have asa 5510 and i need IPS on it so i need to know if it software or Module and if it Module which one works with it thanks 

Been wresting with this one for a bit not. Running IOS 9.2 on a ASA5505 Can anyone tell me how I could accomplish this? I know how to disable ping on the outside interface using icmp deny any outside but then when I try to ping an external ip the rep...

Can anyone confirm that when deploying the 5585-X SSP10 that there is a cost to license the 10G ports? It seems there is like a 20-25k price difference between the two and I don't need the big throughput like the SSP20 has, I just have the need for 1...

Hello,I'm using ASA 5585-X SSP40 with dual CPU 5500 series (16 core).At normally my system use approximate 18-20% of cpu. But some time when I received in Real-time logging "Deny IP spoof from (0.0.0.0) to xxx.xxx.xxx.xxx on interface outside" then c...

Hello,We have an ASA we've configured with global policy.  It's attached to the core switches with two /30 interfaces with OSPF.  These interfaces learn equal cost routes to subnets on the core.We seem to be having a symmetry and state issue i.e. Tra...