Network Security

In order to add the existing license to new CCO ID please follow the steps below: Login to License Registration portal with CCO ID and passwordClick on View Existing License Link, Click on "Add License" Select "Source Fire License Key" from the pull ...

Hi All,On one of our firewalls we hosting a application/service which impacts clients and we recently conducted a Pen test, the external company doing the Pen test have advised us that there is a vulnerability relating to OpenSSL. We have checked the...

So i understand the basic syntax for NATing a single internal network to an outside interface for allowing internet access.  Something like below... object network NAT_INSIDE_NETS  subnet 10.0.0.0 255.255.255.0object network NAT_INSIDE_NETS  nat (ins...

We have 2 IP camera in the computer room and we would like to use an acl to control http access to the individual IP addresses and only leave the access through the server.  The server is on port 21. The Cameras are on an unmanaged switch hooked to t...

Hello,we have 2 ASA 5520s (active/standby) which have a throughput of 450mbps and we have been hitting this recently and the CPU goes through the roof and I see overruns too.I've been using this method to gather the stats, but it is too manual and I ...

Hi, community! Bug CSCur94645 is related to incorrect packet generated by ASA, when you try to log in ASDM via RADIUS authentication.As it seen in bug description - it's fixed, but fixed releases include some strange one: 100.12(0.109)100.13(0.14)100...

We are getting ready to upgrade from a FWSM running 4.0x to an ASASM 9.1.5. I have run the migration tool and uploaded the config to startup and let it boot. I have seen several references to having the change access-lists to use the real IP not the ...

Hello,  I have an ASA5550 running asa914-k8.bin.  It is connected to a Time Warner cable modem.  I have a block of 5 public IP's from TW.  From both outside and from the ASA I can ping the first IP of the block.  I get replies.  When I try to ping th...

We have our Voice and Data Vlan segregated by an ASA Firewall. The CallManager sits within the Voice Vlan. The IPT Solution reference network Design Document says; "By placing a firewall between the Cisco CallManager cluster and both the voice and da...

I've configured PAT on my ASA and it's work but I don't know why that suddenly become not working (I remember it's seem become not working after active DMZ). For troubleshooting, I've tried to configure another PAT command and packet-tracer (below co...

Hello everyone, I have a doubt about the ACL configuring in my ASAI have this acl witch it means that 10.10.11.2 can do www to the host 10.10.10.1access-list 100 extended permit tcp host 10.10.11.2 host 10.10.10.1 eq wwwand access-list 100 extended p...

Hello,We use Cisco ISE 1.2.0.899 on our network (we plan to upgrade to 1.3 in some months).Our network includes Cisco models 2960S (and some 2960T) about wired and 2602I (with WISM2) about wireless.We have to allow PXE boot on one (or many) VLAN.Do y...