Network Security

I have a Cisco 5505 and have an access point plugged into the POE port 7.I have 2 SSID'S on the access point vlan 1 - production on the 192.168.70.0 /24vlan 10 - guest                 172.16.0.0 /24 I do not have a  seperate DHCP sever so the ASA wil...

Hi community,Can you share your idea can we prevent VOIP traffic like skype, kakaotalk, wechat, line...? If we can, how to do it, in general?. Because as far as I know these applications are peer-2-peer and use dynamic ports and update version very q...

Hi,We'd like to implement ASA5585 with SSP-60.I knew that the inspection will stop while the signature is updating.because sensor app will be stopped.I guess there are only one signature database on IPS which is managed by IPS device.It means every v...

I'm attempting to configure an IPS for my first time and have a few questions... I went through Cisco's quick start guide and it appears that the ASA management and IPS management can have seperate IPs on the same management interface, is that correc...

Hi Team,I need one validation from you. I am working on the project and the scope is to use “vCloud Director” with Cisco VSG and ASA 1000v to provide intra-tenant and Edge firewall capabilities and not to use vShield Edge.  Is this approach do-able?C...

          Please help, I cant get the ASDM to run. Please see config belowCisco Adaptive Security Appliance Software Version 8.4(4)5Device Manager Version 6.4(9)Compiled on Wed 08-Aug-12 19:07 by buildersSystem image file is "disk0:/asa844-5-k8.bin"C...

One of our clients has a problem with their CSM deployment, they recently upgraded their CSM version which is deployed on a vmware environment, the services are listed as running and the webservice is available on port 1714 - when he tries to access ...

    Hello EveryoneI have a new ASA 5512 which does not allow me to use VLANs like I did with previous version.  I have 3 interfaces, inside, outside and dmz.  I want to add another unused interface to my DMZ network instead of uplinking my dmz interf...

Hi, We are deploying two Netscalers that are going to be sitting in our DMZ. The firewall also has an IPS module in it that inspects all the inbound/outbound traffic. The team deploying the Netscalers want to connect one interface to the DMZ and the...

I want to change de crypto key size in a Cisco ASA 5540 with 8.4(3) software version.Two keys are shown:plm-airf-gsni-1# show crypto   key  mypubkey rsaKey pair was generated at: 12:11:22 GMT-5 Oct 23 2013Key name: <Default-RSA-Key> Usage: General Pu...

hi,There is replication issue between primary and standby ISE node.Once check logs on both node the certificate was expired.There is self sign certificate installted on both devicesAny body advise me how i can renew self signed certificate on both de...

I have a problem with the card Hardware: WS -SVC -FWM -1Currently has the versionFWSM Firewall Version 2.3 (4 )FWSM Device Manager Version 4.1 (5 )The problem is that I can not enable the interfacesInterface eobc " eobc " , is up , line protocol is u...

Hi I have a problem when accessing a certain website..When i go to the Real Time Log Viewer this is the entry i Find for that specific Website/IP..I can Acces the website when not going through the Firewall..and from my Mailserver which is NATed to a...

We have IPS sensors distributed throughout our internal network and we're seeing signature 6065/0 show up between certain DNS servers at certain times. I have the IPS setup to log these packets and it looks like name queries that are failing keep hap...