Network Security

Hello all.  I recently upgraded my 5520 to 9.0.1 IOS.  Today I tried to apply a capture to my inside interface referencing a simple ACL and I get this error.ERROR: Capture doesn't support access-list <capin> containing mixed policiesI also created a ...

ASA 5520 with three interfaces - inside, outside, and now newly created DMZ - all physical interfaces on the FWInside interface is connected directly to layer 2 switch with port on switch set as access port for a specific VLAN 601This layer 2 switch ...

Having an issue with repeated Shunned Packets in the ASFM Syslog.  I was going to call support, however I'm not sure if I can even explain the issue, if there even is an issue, that is why I need your help.I'm Getting a constant stream of Shunned pac...

I'm security analyst tasked to running SIEM we are getting Cisco asa5585 traffic logs. Two firewall running in active -active configuration. I'm detecting some suspcious pattern which I need clarification/understanding from the community. In less the...

Is it possible to bypass the ips for a specific connection - meaning if i only want to bypass the ips for traffic from 1-ip to another ip?we currently have a global policy defined - matching 'any' to 'any' 'ip' traffic  - and inspecting inline.  it a...

Hi folks,I've got a questiong about ACL hashing on routers and ASAs, on the router I can use the command:ip access-list logging hash-generationAnd as far as I understand the ASA generates a hash for its ACLs by default, is this true? is there some eq...

Добрый день! Пытаюсь установить Cisco IME на Windows 8, однако появляется ошибка Cannot start MySQL server и говорит что не хватает файла msvcr71.dll. Скопировал этот файл с 7-ки в нужную папку, однако результат тот же. В чем может быть проблема?Верс...

I've received a couple of alerts from Symantec anti-virus on a server and client computer saying that it is being port scanned. I was wondering what a network administrator would do about these warnings? Should I just setup a wireshark capture on the...

Hi,We will share the Internet line with the building management. Building management have Cisco firewall 5510 and we will connect our Cisco firewall 5505 to the Building management firewall DMZ port. We have been given one public IP address to assign...