Network Security

Forgive me if this question has been asked in other forms before but I have not been able to find a recent answer.Does the Cisco ASA platform support /31 RFC 3021 addressing on it's interfaces in any of the latest versions of code.  We work regularil...

Hi,I have a problem configuring ASA 5505 to connect to internet because the modem that connect to internet was tagged with vlan to the ISP. As i know that the ASA 5505 is in switch mode, so in order to connect to the modem, its need to be in the rout...

Hi,Have a question regarding HTTPS traffic going through IPS (AIP-SSM). I understand that Cisco IPS cannot monitor encrypted traffic except monitoring the headers and trailers. So,- Does it mean there's no use of sending HTTPS traffic to AIP-SSM (unl...

                   i have just noticed that after upgarde of image and asdm to 911 and 711, the implicit deny acl is missing from the outside interface. Is this deliberate or a poor upgrade. i am upgrading from 8.25 normally, depends what the reselle...

Hi, I want to use active authentication if AD agent cannot identify user if Active Directory Agent failed.I try to configued the active authentication on ASA Cx.But, I don't understand well how to do it.Could you say to me how to do ??Someone can hel...

                   Forumwhile working at a client site today I was examining ACL's on one of the Customers ASA boxes.I went to the Access List section to observe. I noticed something unusual which I had  not ever seen before in my years working with ...

I have an old computer running pfsense, talked boss in buying an applicance.  My concerns regarding the ASA 5505 is that it is older, and EOL could be announced at any time.  And, the fact that AIP SSC has already been announced to be EOL, or End Of ...

We are looking to setup an ASA 5510 (running ASA 8.3.2) at a remote site that we need to connect back to the ASA 5520 (running ASA 8.2.4) at our central office via L2L tunnels. The issue we are having is that the remote site is on another organizatio...

Having trouble figuring this out.  Probably missing something simple.I have some users that are trying to initiate a passive ftp connection to a server on the web.I’ve setup an object group for general web traffic outbound sourced from inside.  Here’...

Hi,We are facing high cpu utilization issue in Cisco IPS 4255 running software  Version 7.0(1)E3. We have checked in show tech and found 80.4% CPU is consumed by sensorApp. Also we have found no packet drops on the IPS interfaces.Does anyone having a...

I have a problem with a Cisco IOS IPS to turn on the interface approximately after 12 hours the device is locked and you need to physically reboot.and restarts when the interface is disabled equipment is operating properly, the category that is enabl...

I am unable to ping the interface IP from any other vlan interfaces attached to FWSM.for eg: fwsm vlan 10                        nameif DMZ1                         ip  10.20.20.1/24      I have host  in vlan 10 , that ip is 10.20.20.100             ...

Hello,Yesterday the ASA 5585-X S40 going up to 99% cpu, I was checked almost ACL, service policy, disabled threat-detection but can't decrease cpu load. I tried some discussion, document but no luck. Result of the command: "show cpu usage"CPU utiliza...