Network Security

    Hello EveryoneI have a new ASA 5512 which does not allow me to use VLANs like I did with previous version.  I have 3 interfaces, inside, outside and dmz.  I want to add another unused interface to my DMZ network instead of uplinking my dmz interf...

Hi, We are deploying two Netscalers that are going to be sitting in our DMZ. The firewall also has an IPS module in it that inspects all the inbound/outbound traffic. The team deploying the Netscalers want to connect one interface to the DMZ and the...

I want to change de crypto key size in a Cisco ASA 5540 with 8.4(3) software version.Two keys are shown:plm-airf-gsni-1# show crypto   key  mypubkey rsaKey pair was generated at: 12:11:22 GMT-5 Oct 23 2013Key name: <Default-RSA-Key> Usage: General Pu...

hi,There is replication issue between primary and standby ISE node.Once check logs on both node the certificate was expired.There is self sign certificate installted on both devicesAny body advise me how i can renew self signed certificate on both de...

I have a problem with the card Hardware: WS -SVC -FWM -1Currently has the versionFWSM Firewall Version 2.3 (4 )FWSM Device Manager Version 4.1 (5 )The problem is that I can not enable the interfacesInterface eobc " eobc " , is up , line protocol is u...

Hi I have a problem when accessing a certain website..When i go to the Real Time Log Viewer this is the entry i Find for that specific Website/IP..I can Acces the website when not going through the Firewall..and from my Mailserver which is NATed to a...

We have IPS sensors distributed throughout our internal network and we're seeing signature 6065/0 show up between certain DNS servers at certain times. I have the IPS setup to log these packets and it looks like name queries that are failing keep hap...

Hello,I'm trying to track down the installation and configuration procedures for the common criteria EAL4 evaluated ASA5510 but not having any joy.The ASA Release 8.3.2 certification report (http://www.commoncriteriaportal.org/files/epfiles/st_vid103...

Hi,I have a problem with auto-update.  My configuration:ida-client server url https://www.cisco.com/cgi-bin/front.x/ida/locator/locator.plip ips config location flash:ips retries 1ip ips notify SDEEip ips name myips!ip ips signature-category  categor...

Hi - I have an ASA 5510 acting as our Front End device and I recently tightened the Threat-Detection settings to shun hosts detected as scanning attack devices.  Normally I am seeing Scanning Attack counts < 10-15.  However I am seeing a Scanning Att...

HiWhen i was working in the asa5505 sudenly i lost the console connection and i notice all the led (front and back ethernet ports) flashing rapidly.any idea whythanks for your help

So I have an ASA 5510 8.4 with a WAN IP of 123.123.123.54  and inside network of 192.168.3.0 I have a server at 192.168.3.25 that 123.123.123.54 is NATted to.   I need to do one of two things.  Either I need to be able to get the ASA to allow ASDM/SS...

Hi allI can not view any log on ASA version 8.4.7 via ASDM, console, ssh...ASA 5520 is running multicontext modeanyone have the same issue.logging enablelogging timestamplogging buffer-size 81920logging asdm-buffer-size 512logging console notificatio...

Hi all,I am practising Firewall on GNS3. I have natted DMZ server to Outside IP. I have written an access-list saying permit any source from outside network can telnet a host on DMZ. When I do packet trace from ASDM it works perfectly, even hits acce...