Network Security

Let's say there is a outside IP address of 1.1.1.1 and I want to get to a piece of equipment on theinside of the network with an IP address of 192.168.168.234 and use TCP port 3000.So I try to go to http://1.1.1.1:3000 and get to that piece of equipm...

Hi All,  I have been trying to make SNMPv3 work on IPS module on our ASA 5525 but having following issue, - Cannot find the snmpv3 configuration on the IPS GUI interface Even though conf document said you can do it from GUI from version IPS 7.2(2)E4 ...

Hi there , I'm running an ASA 5510 and am trying to backup the config to a backup unit for testing . I'm having problems exporting the CA certificate . I've done this in the past with no issues. when I run the crypto ca export LOCAL-CA-SERVER pkcs12 ...

I want to run active active failover in transparent mode on asa 5545 with IPS. I want to know whether multicast traffic will be allowed to pass through the firewall in this scenario.

Hi Guys, Is it possible for sourcefire to act as proxy for the http traffic?? thanks Nitesh

We already have ISE IPN on this ASA for our VPN users, but now we want  to migrate it to be our Internet firewall as well. The issue we have is that for the IPN to work, the 'inside'  interface of the ASA and the 'outside' or 'untrusted' interface of...

Hello,I'm looking at upgrading my ASA to the newest version 9.0(3) . I am currently running on version 8.2(2) of the software. I know 8.3 introduced some major changes . I've been looking into the upgrade path and want to know if I can upgrade 8.2(2)...

I've discovered a bug in the newly added SGT option when running a packet trace using ASDM. When you do not want to add or use the SGT number (leaving it unchecked), the command sent to the ASA5555 includes invalid syntax:packet-tracer input outside ...

Hi,I have an ASA 5510 with software version 7.0(2) and would like to upgrade to a newer version as to enable Gigabit functionality on the interfaces. Is there an upgrade path that I must follow before moving to a newer version such as 8.3(2), or can ...

Hello,I have a customer who wish to replace an old 7200 router that supports the following services:- 5000 static nat with support to 15000 nat translations in the near future.- Around 125 Mbps of bandwidth throughput- 200 VRFsThis customer wants an ...

I have seen from my fail2ban logs that my servers (ssh in particular) get hammered daily on my dmz from external sources trying to brute force.I would like to block certain ranges of the highest offending ones.  How can this be achieved on the 5505?E...