Network Security

Hello Friends!Is this supported yet on the ASA?  I want to be able to have radius assign privilege levels to firewall cli administrators.Upon login, I'd like them to be immediately be placed into "enabled mode" (without needing to know the local enab...

I have an ASA 5510 deployed and we are getting a tonne of port scanning traffic (who isn't these days) and ping traffic.The threat scanning thresholds seem a bit too high and was wondering if there is a way to use a Service Policy Rule to perform a S...

Hello.What do you use or recommend to use on your ASA ? I've used for a long time, Per-Interface ACL but now global ACL are available.But what are the advantages of having everything in one ACL ? What do you recommend ?Thank you.Best Regards,Mathieu ...

Is there a simple way to block ip addresses by foreign countries? There is so many network addresses needs to be blocked, it seems it is not practical on the ASA. Can someone give me some suggestions on this?

Dear Team,I have SA540 firewall with me, I am trying to enable a site-to-site VPN between Fortigate 50B and SA540. I am facing issues with the setup. Please say if any license is required for bringing uo the site to site IPSEC tunnel.Please find the ...

I am trying to connect to shared folder over the internet-using netbios. The traffic will be going from inside to outside. When I try to connect from windows client I get error 1920. Can anyone shed some light on how to create access lists to enable ...

Hi!Got a case from a customer. They want me to open some ports so that one client can use some applications.The problem is, I am not sure on which interface i should open the ports. The customer have about 10 interfaces on the ASA. It's a client on t...

Hi thereSorry about this stupid question, but CISCO has just too many licenses, codes, contract/serial #...Each client needs a VPN client software installed.This would be the "CISCO AnyConnect VPN Client", right?It is the same for SSL and for IPSec?I...

Hello all,I found that on older IPS IOS 5 is possible to inherit previously tuned signatures settings even if new signature update pack from Cisco is downloaded.Descriptipon of that how-to is available here.I'd like to know, if the same feature is av...

Hi, i have webserver and i want to block scan for website using IPS ( any type of scan which reveals server infomoration).Is there any signature used, if not can i create custom signature (how i can do it)thankssssssssssss                  

Hello everybody.I migrate from PIX515E(8.0.4) to ASA5520(8.4.5)I have this configuration on PIX515Estatic (ins10,INTERNET) tcp 10.1.15.5 5555 access-list POS_vpn_nsaccess-list POS_vpn_ns extended permit tcp host 10.1.21.6 eq 5555 192.168.0.0 255.255....

I have a TAC on this, but thought I would throw it out here too.  We recently upgraded a 5520 to 8.4 code so HTTPS traffic can filter through the CSC. Well, it caused a major headache now in that it takes several attempts to pull up any https pages. ...