Network Security

I would like to create a NAT rule that includes multiple original services. Currently, I am only able to add one original service even though I have service groups configured on the device. I need a public address translated to a private address, but...

We have two Cisco ASA 5545's fronting our Internet traffic a lot of it comes from Akamai. Because we use a CDN if an attacker uses them to start an attack the ASA is seeing an IP from Akamai that is allowed.  Can the IPS or IDS read the X-Forwarded-F...

 hello guys,were can i get a signature file for uploading it in the isp Module.Is it possible to see the status which, or if a signature file is loaded ?,or can this only be done after configuring a sensor ?The unit was bought as ips version, with pr...

Hi,I recently came across a peculiar cisco asa fail over issue where the device failover occurred when some of the interfaces went down even though the interface were not configured to be monitored.I have verified the below mentioned possibilitiesa) ...

We have had a single ISP for years with a  public address space 203.xx.xx.xx/24, now we have just got another ISP with a 220.xx.xx.xx/28 address spacenow when I  do my natting I obviously want the appropriate public address to go thru to the correct ...

Hi, I have a single host that I want to static nat a number of services to. I want to use service object groups to simplify commands. I guess the beginnig is:object-group service OG-SERVICES-INSIDE-MYSERVER service-object tcp destination eq ftp servi...

So, I have been presented with an interesting challenge. I would prefer using an internal Linux host to solve this, but my manager is convinced the ASA can do this. Hope this is the correct group. This is a NAT and routing question.We have two VPN tu...

I have 2 ASA 5510's in a failover bundle.  I have a weird issue right now, where a site (https) is apparently getting blocked behind the firewall.  If I browse to the site, it just spins, then says the page could not be displayed.  I can ping the IP ...

Hi, I have a Cisco SG200-26P PoE Smart Switch. I am getting security issues as a vulnerability: CGI Generic XSS(Parameter Names), a solution was provided saying it needs to be patched or upgraded. My switch firmware is updated to the latest Version 1...

Hi I have issue with NATing , I have ASA 5025 x and i make static NAT for some servers and some users to access internet , also i have another branches i need to access it by my private IP , the nating to internet working fine but i try to make nat e...

I need to check whether Sourcefire IPS support MQTT or MQTT over SSL TCP protocol in terms of detection of intrusion events, network discovery and etc.