Network Security

Cisco ASDM 5520 Firewall and Web Server IP Address Change

In our environment, we changed a block of ip address that were accessable via HTTP,HTTPS and etc that sits behind a Cisco ASDM 5520 Firewall. Since the change, we are now unable to access the previous HTTP,HTTPS and etc ports. My firewall engineer st...

Copy the signature package from the TFTP server to the router

Dear allI am trying to realize the lab Configuring an Intrusion Prevention System (IPS) Using the CLI and CCP (chapter 05 for ccna security version 1.1) in GNS3Router 7200 with a ios c7200-adventerprisek9-mz.124-22.T.binI have a problem in the3 Copy...

FireSIGHT System generates connection events although logging is disabled

Although all Connection Logging options are disabled in an Access Control policy, my Sourcefire FireSIGHT System still generates a Connection Event.

IPSEC issue between ASA 5525-X 9.1 and sonicwall

i have issue on L2L link between ASA and Sonicwall.actually IPSEC bring up normally between some of remote, local networks but other networks when initiate traffic between them asdm show messageJul 07 20:43:02 [IKEv1]Group = A.A.A.A, IP = A.A.A.A, Re...

Active passive configuration needed

Hi team,I have active and passive asa 5540 devices.It preconfigured active passive through ASDM.I have some issue with configuration for port forwarding so I just restore the previous configuration file.Now I check with the device through console it...

Resolved! ISP Failover - Internet Access to ISP1 and VPN Traffic to ISP2

HiCommunity.I've successfully setup ISP Failover. Now all the traffic (internet and VPN) goes over ISP1 and if the connection fails to ISP1 it goes to ISP2.But I like to have a different setup. All the internet traffic should go to ISP1 and all the V...

Resolved! Best Firewall

Why any company choose Cisco ASA instead of fortigate firewall ? How ASA is different from other firewall ? Please explain

How to prevent NAT Attacks?

We had a problem in our networkclient PC--------------(inside) Cisco 2911 router (outside)-------------internetone of the client was doing too many translation on router and eventually router ended up with memory allocation errorwe disconnected the ...

Resolved! what is wrong with this NAT rule?

I have a NAT rule that seems to be failing on my ASA The host is on a DMZ interface. Let's call it ACME-DMZ the nat rule looks like this object network obj-172.31.150.41 host 172.31.150.41 nat (ACME-DMZ,outside) static 166.191.102.41 the access-list ...

Permit two networks behind ASAs to ping each others.

Dear all, i have two ASAs that i've connected like this:computer 1 <-----> ASA1 <--------------> ASA 2 <----------> computer 2. computer 1:interface: 192.168.103.2 255.255.255.0 ASA 1:inside: 192.168.103.1 255.255.255.0outside: 10.10.10.1 255.255...

Setup an Intranet on an existing network.

I have approximately 50+ VLAN's setup on my network already. 3 off those I have in different floors and different VLAN's, and my boss wants to isolate them from the internet, but be able to access different webservers within other subnets outside th...

Will disabling inspect for h323 drop existing h323 sessions on the ASA?

I'm trying to troubleshoot some Avaya H323 issues and one of the solutions was to disable inspection for h323: policy-map global_policy class inspection_default no inspect h323 h225 no inspect h323 ras What I need to know is whether or not ...

Geolocation update returns an error: "Failed to install Geolocation Update. Please contact Sourcefire support."

An attempt to install a version of the Geolocation Database (GeoDB) that is already installed returns the following error: Failed to install Geolocation Update. Please contact Sourcefire support.

Resolved! ASA-IPS auto update Cisco.com

Hi Everyone, Need some help from expert who familiar with ASA-IPS. Currently i have implemented ASA-IPS. I have set that the IPS address as my management ip range. But somehow, i found that my management ip range are not permitted to internet. Is tha...