Network Security

ISE High availiblity issue

hi,There is replication issue between primary and standby ISE node.Once check logs on both node the certificate was expired.There is self sign certificate installted on both devicesAny body advise me how i can renew self signed certificate on both de...

WS -SVC -FWM -1

I have a problem with the card Hardware: WS -SVC -FWM -1Currently has the versionFWSM Firewall Version 2.3 (4 )FWSM Device Manager Version 4.1 (5 )The problem is that I can not enable the interfacesInterface eobc " eobc " , is up , line protocol is u...

ASA 5510 TCP Connection was deleted

Hi I have a problem when accessing a certain website..When i go to the Real Time Log Viewer this is the entry i Find for that specific Website/IP..I can Acces the website when not going through the Firewall..and from my Mailserver which is NATed to a...

DNS Query Name Loop DoS Sig 6065/0

We have IPS sensors distributed throughout our internal network and we're seeing signature 6065/0 show up between certain DNS servers at certain times. I have the IPS setup to log these packets and it looks like name queries that are failing keep hap...

ASA5510 - Common Criteria EAL4 configuration

Hello,I'm trying to track down the installation and configuration procedures for the common criteria EAL4 evaluated ASA5510 but not having any joy.The ASA Release 8.3.2 certification report (http://www.commoncriteriaportal.org/files/epfiles/st_vid103...

Router 2911 15.3(3)M1 IOS IPS Auto-update not working

Hi,I have a problem with auto-update. My configuration:ida-client server url https://www.cisco.com/cgi-bin/front.x/ida/locator/locator.plip ips config location flash:ips retries 1ip ips notify SDEEip ips name myips!ip ips signature-category categor...

Waves of Scanning Attacks? How do they coordinate these?

Hi - I have an ASA 5510 acting as our Front End device and I recently tightened the Threat-Detection settings to shun hosts detected as scanning attack devices. Normally I am seeing Scanning Attack counts < 10-15. However I am seeing a Scanning Att...

asa5505 all lights flashing rapidly

HiWhen i was working in the asa5505 sudenly i lost the console connection and i notice all the led (front and back ethernet ports) flashing rapidly.any idea whythanks for your help

ASDM Access on outside interface with 1:1 NAT

So I have an ASA 5510 8.4 with a WAN IP of 123.123.123.54 and inside network of 192.168.3.0 I have a server at 192.168.3.25 that 123.123.123.54 is NATted to. I need to do one of two things. Either I need to be able to get the ASA to allow ASDM/SS...

ASA logging issue

Hi allI can not view any log on ASA version 8.4.7 via ASDM, console, ssh...ASA 5520 is running multicontext modeanyone have the same issue.logging enablelogging timestamplogging buffer-size 81920logging asdm-buffer-size 512logging console notificatio...

Resolved! Cisco ASA 5505 - 2 internal Networks

Hi new to ASA's,Been trying to get the following setup working for ages but can't see what I am missing:(Got image from another post but exactly what I want but cannot get working)I can get ping between subnets but nothing else and Lan 2 cannot get t...

Problem with DMZ

Hi all,I am practising Firewall on GNS3. I have natted DMZ server to Outside IP. I have written an access-list saying permit any source from outside network can telnet a host on DMZ. When I do packet trace from ASDM it works perfectly, even hits acce...

Resolved! How does a firewall track Udp

Hi allCan anyone tell me how a firewall tracks the state of a udp connection?Cheers

Resolved! ASA5505: WebVPN not working after adding second vlan

Hey Guys,I have added a second vlan on our ASA5505 for the wireless network (yes, I know it's not a router) and now webvpn has stopped working. Basically what happens is the ASA tries to unnat the request (which I think it shouldn't) and because of a...