Network Security

Hi,Have a question regarding HTTPS traffic going through IPS (AIP-SSM). I understand that Cisco IPS cannot monitor encrypted traffic except monitoring the headers and trailers. So,- Does it mean there's no use of sending HTTPS traffic to AIP-SSM (unl...

                   i have just noticed that after upgarde of image and asdm to 911 and 711, the implicit deny acl is missing from the outside interface. Is this deliberate or a poor upgrade. i am upgrading from 8.25 normally, depends what the reselle...

Hi, I want to use active authentication if AD agent cannot identify user if Active Directory Agent failed.I try to configued the active authentication on ASA Cx.But, I don't understand well how to do it.Could you say to me how to do ??Someone can hel...

                   Forumwhile working at a client site today I was examining ACL's on one of the Customers ASA boxes.I went to the Access List section to observe. I noticed something unusual which I had  not ever seen before in my years working with ...

I have an old computer running pfsense, talked boss in buying an applicance.  My concerns regarding the ASA 5505 is that it is older, and EOL could be announced at any time.  And, the fact that AIP SSC has already been announced to be EOL, or End Of ...

We are looking to setup an ASA 5510 (running ASA 8.3.2) at a remote site that we need to connect back to the ASA 5520 (running ASA 8.2.4) at our central office via L2L tunnels. The issue we are having is that the remote site is on another organizatio...

Having trouble figuring this out.  Probably missing something simple.I have some users that are trying to initiate a passive ftp connection to a server on the web.I’ve setup an object group for general web traffic outbound sourced from inside.  Here’...

Hi,We are facing high cpu utilization issue in Cisco IPS 4255 running software  Version 7.0(1)E3. We have checked in show tech and found 80.4% CPU is consumed by sensorApp. Also we have found no packet drops on the IPS interfaces.Does anyone having a...

I have a problem with a Cisco IOS IPS to turn on the interface approximately after 12 hours the device is locked and you need to physically reboot.and restarts when the interface is disabled equipment is operating properly, the category that is enabl...

I am unable to ping the interface IP from any other vlan interfaces attached to FWSM.for eg: fwsm vlan 10                        nameif DMZ1                         ip  10.20.20.1/24      I have host  in vlan 10 , that ip is 10.20.20.100             ...

Hello,Yesterday the ASA 5585-X S40 going up to 99% cpu, I was checked almost ACL, service policy, disabled threat-detection but can't decrease cpu load. I tried some discussion, document but no luck. Result of the command: "show cpu usage"CPU utiliza...

Good Afternoon,We have a strange issue going on with our network environments. We are trying to rollout an application that is 3rd party web-based and it has multiple Java object based videos. The application is hosted by Skillsoft called Skillport.T...

Hi everybody,thanks for a great forum and ressource!Our syslogs recently started showing a specific spoof getting dropped by one of our main firewalls, an ASA. "Deny IP spoof from (0.0.4.0) to <removed public ip> on interface outside"While no harm is...