Network Security

Hi folks, Great to be here! Just installed IPS version 7.1; the environment is a financial institution servicing connection from third party and in-house user. I need to implement several custom signatures; prominent among these include sig to stop c...

Hello,We have an ASA 5510 with the SSM-10 module installed. ASA is running version 8.2 and IPS is version 7.1. We have put the module into inline mode in order for it to actively deny traffic, but we see policies that are firing without being acted u...

Hi, cisco configure like 1300 signatures enabled by default in the signature packages for the appliances 42xx, if I want to enable more than the default configured by cisco, how many more I can enable without affecting the performance of the applianc...

I am trying to configure the software based classic IPS module on the ASA to auto update the signature file. Something I do not understand is how to allow this. The IPS interfaces essentially have an IP address that is shared with the mgmt. subnet/vl...

Hi all, I my trying to do a telnet but Im always getting timeout. when I check in the pix 515 i see this :TCP inside 10.100.1.30:55139 inside 142.100.64.11:23, idle 0:00:01, bytes 0, flags SaAB And I have the same issue with http. Ping works with no ...

Hi,I have this snmp version 3 configuration on the ASA 5505 running code 8.2(5)51: snmp-server enablesnmp-server group test_user v3 privsnmp-server user test_user test_user v3 auth sha pass1234 priv aes 256 pass1234snmp-server host inside 192.168.1.1...

Dear All, We have a setup the IPS 4510 working inline mode with strict inspection turn on. we have detected some latency issue accessing the internal website. So we did some capture at the IPS interface. We found that there's a lot of out-of-order pa...

We have detected a high risk in asa5510.risk information:Port:22 TCP - ssh Script Id:  Name:Cisco IOS: Spoofed EIGRP Packet Saturation DoS Risk Score:7.8(High risk) Product:Cisco IOS Extended Interior Gateway Routing Protocol (EIGRP), as implemented ...

Hello I have a big problem with ASA routing,I have two locations with a ASA5515 Cluster Vers 8.2 at one side and a ASA 5525 Cluster Vers 9.2 at the other side. Both sides are connected with a server DMZ zone. At the server I have entered a static rou...

Hi,      I am struggling to find a solution to do the following:  Permanently block an ip after X amount of login failures?  I know it sounds simple, but, maybe someone can give me an example.  I don't want to block a range of ip's, just a specific o...

Hello there, We have users in US who are required to access US websites for content searching but unable to do so because of their IP address is being Natted to external IP that is assigned in Canadian block.We cannot use proxy servers due to legalit...

What is the recommended configuration approach for dealing with the wildcard domain names required by MS Office365 on the ASA?

I am using Cisco Ez VPN and its working fine. I also want to configure Cisco anyconnect vpn simultenously with Ez vpn. Please suggest is it possible to configure and use both VPNs at the same time.  

I want to use ASDM to connect to ASA. I used some documents on Internet and did managed to setup and run ASA 8.4(2) on GNS3 and run commands in CLI. And then I setup ASDM 7.3.1 to be able to connect to ASA. I setup the newest version of Java (V8, upd...