Network Security

I have seen from my fail2ban logs that my servers (ssh in particular) get hammered daily on my dmz from external sources trying to brute force.I would like to block certain ranges of the highest offending ones.  How can this be achieved on the 5505?E...

I have cisco ASA firewall, a Cisco router and a cachebox,  the cisco router is connected to the inside interface of my ASA  which connect directly to my inside network and my ASA is facing the WAN interface. the cache engine ip is 192.168.1.18 and my...

 Dear Support, Currently, I have configured VPN site to site between two ASA ( Branch A and Branch B ). Normally, VPN site to site always permit full range of ip address in interesting traffic ( Access-control-List ). But for my scenario I want to al...

We had a problem with SMTP inspection dropping some regular emails (Cisco 2901 IOS 15.0).The original configuration, made using CCP, was:access-list 102 remark CCP_ACL Category=0access-list 102 permit ip any host 192.168.1.111class-map type inspect m...

Hi,We have  pair of 5585-X running 9.1.x with multi-contexts and IPS SSP60 modules on both ASA. Currently only two contexts are created and both are in failover group 1. While doing failover tests we noticed that once the secondary ASA is active and ...

Hello,I am well aware as how to create policies in the ASA for specific hosts or IPs but what I want to do is create a generalized policy that gets applied to all users on an interface but at a per-user level.For example, I want to have all users on ...

For the last one month we have been hit by DDOS attacks that seem to be using SSDP (Port 1900 UPD). It’s just happed today and it lasted 15 mins…during which time our internet connection (Comcast Business line. 100/20 MB) came to a crawl. No one coul...

 Hi experts, Can you explain what are the features if i load WSE license in my asa? Do it have the decryption mechanism? Thanks 

Hello, I have a 5510, and I did a license upgrade and after that I configured a vpn anyconnect after a reboot, the device shows the prompt but when I want to put or write something the devices is not answering. Reading from flash...!!.Cryptochecksum ...

Hello Community, We have many branch sites that use Cisco ASA 5505 firewalls. I configured each of them to send syslog messages to a specified syslog server back at the HQ, as well as the local buffer. However, the syslog messages are not getting to ...