Network Security

Hello folksI am looking to downgrade software on our Cisco ASA 5512-x firewall from 9.12 to 9.11 (dont ask me why, I was told to do so), is there any precedures doing so? would the running-config currently on the firewall be affected by the downgrade...

Hello Experts,Presently we are using OS 8.2.5 version on ASA 5510 model and now planning to update it into 8.4.7 version which I believe it's stable version. Please confirm if any other version you advice.Also, the NATTING and ACL format will be chan...

Hello, Can I upgrade ASA IOS from 8.4(1) to 9.1 without any impact to the configuration?I note that i have no NAT rule on my Firewall. ASA5510 / RAM: 1024 MB Thanks for your help !    

Hi, When I try to connect to my ASA via Prime, I have this message: SSH session from ABCD on user interface xxxxxx "xxxxxx" disconnected by SSH server, reason: "Internal error" (0x00)  When I connect directly, it works.  My two ASA are ASA5515 ASA ve...

I have an issue which I am not sure how to resolve.I have three devices, one I use as out of bandI run reverse ssh from device 1 to device 2 consoleI then reverse ssh from device 2 aux to device 3 consoleMy question is, if I forget to kill the line a...

Hello! I'm trying to set up a firewall rule to allow TFTP traffic to come from my switches in my DMZ so as to do proper configuration backups. Ideally I'd like to allow ONLY these 2 IP's for TFTP traffic and nothing else. I set up the below rule for ...

H Guys,My server farm is connect to a 6500 switch, vlan 2 (172.28.2.0/24) was assigned. Now I am working on a ACL to protect those servers. The requirement from server owner is to allow certain TCP ports (he provided some tcp port numbers).I had crea...

Hi I have 2 OSPF process on my ASA5520 but have backbone areas, but there doesn't seem to be a way to allocate interface to specific OSPF processes. I am running 8.4(7)  

Hello,I inherited a network with two Cisco ASA 5540's, one connected to the primary ISP and the other connected to the backup ISP. Each ASA has a connection to three switches on the three remaining interfaces. See the diagram below for more details.A...

Hi, my customer operates himself a VM for Cisco ISE, so he needs no smartnet service thats ok. Now he needs L-ISE-BSE-100= (Base Licence) 100 teers. Question: Can he gets during 5 year maintenance time updates and tecnical support for free??

Hi, Can any one  shed light on whether SUSA (Now SUSW) is absolutely needed as secondary coverage to the SU1. With the SU1 what kind of support is provided on for the signature?? Many thanks in advance for your soonest response.

Hi I have IPS with version 7.0.4 and I need update to version 7.1.8e4 but i can't load the license because show a message is not support for this license. Then the device has other license but the devices not run other license only 7.1.x but i can't ...

When configuring an ASA for IPS, does the IPS access list need to be the first access list in the configuration?  For example, in our environment, we want to have every packet go through the IPS.  So, if my current configuration is as follows, does t...