Network Security

Resolved! NAT/PAT config over IPSec VPN connection

Hello all,Sorry i'm sure there are other threads on this question. But I can't seem to get anything to work. This is what we are trying to get done: Site A needs to access the Host in Site B. Of course the Host has a Default Router that has a rout...

IPS signature to block brute force attempt

Hello all,We have an Outlook web access server and I would like to block an attemt of bruteforcing its login page (SSL enabled). Is there any signature that can accomplish this?Thanks in advance

Resolved! FQDN Network Object on ASA-SM 8.5(1)

Hey erveyone,I have an ASA Services Module in a Catalyst Switch with the 8.5(1) version installed on which I am not able to create FQDN Network object :ASA-SM(config)# object network www.cisco.comASA-SM(config-network-object)# ? description ...

5525 Authenticated User Access

We've just replaced our Fortinet Firewalls with 5525's but are struggling to get a feature working that worked great on the Fortinet firewall.All our users use a proxy for internet access that's configured in IE but from time to time some users need ...

Removing Route-map from Cisco Pix

Hi alli have pix firewall 525, configured with ospf process. We are also performing route filetering in ospf process using route-map.now we want to remove this route-map from ospf process. could anyone let me know step-by-step process for removing ro...

Changing the primary/secondary designation on ASA pair

I have a pair of ASA 5520s running 8.2 configured for active/standby. However I want to change what is currently labelled as the primary to be the secondary and the vice versa other unit (not talking about flipping from active to standby etc). Is th...

Resolved! Is it possible to perform 'http to https' redirects from ASA ?

Hi all,We recently had some penetration testing done on one of our servers (which has a public front end), and a major issue that was found is that users are able to authenticate without using HTTPS.I know that we can configure http to https redirect...

ASDM 7 for Mac OS - (better to read the release notes)

Just a warning to all Mac-users wishing to upgrade to ASAv9 and the corresponding ASDM 7.0:Open Caveats in ASDM Version 7.0(2)CSCuc45845: ASDM Launcher does not work with JAVA version 7 on Mac OS For me, the ASDM-Applet also doesn't work as it should...

Load Balance with ASA

Hi Friends, I have ASA 5520 with dual ISP .Both isp's are terminated in same box.I want to load balance between isp. How to achieve this.I know about static route tracking.My requirement is I need to allow the specific source to sec...

site to site ipsec vpn want to restrict bandwidth for perticular tunnel

Hi all , Can i configure tunnel bandwidth size on IPSec vpn tunnel (site to site) . if yes how can i achive it .please revert back .Thanks For help in advance ..====================

ASA 5520 - 8.4(2) ASDM 6.4(5)

Hi there,After upgrading to 8.4(2) and ASDM 6.4(5) I seem to have an extra access rule duplicating an existing rule, this is only visable through the ASDM. When using the CLI you can't see this duplicate rule.I therfore get the following warning ever...

Resolved! ASA5505 Blocking Port 3101 for Blackberry Server

Hello all,I thought I had the configuration to allow bi-directional traffic for my Blackberry server. I have a second fw with the same config and it worked on that one. But right now, my blackberry server is down, and all the users are upset. :-(B...

Create the "outside" interface on a subinterface?

So I have, what I think is an easy question, but I think I'm overthinking it. See, too many thinks..I have a circuit that will be delivered to a client next week and we are installing an ASA 5585x for them. They will have a circuit coming in with a f...

Resolved! How does Firewall work ?

Hi Experts,I have worked with lot of firewalls but i did not understand the actual use of this.I know only one defination for Firewall => The firewall restricts unauthorized access from the outside, it protects from Hacker and crackers.It is only for...

ASA 9.0(1) on 5510

So I loaded the shiny new ASA 9.0(1) on a test/dev cluster of 5510's with the SecPlus license.Two things.1. In 8.4.4 (or maybe 8.4.3?) new password-policy commands were introduced, which allowed for very granular password policies for local users. ...

Network Security

Forum Posts

Resolved! NAT/PAT config over IPSec VPN connection

IPS signature to block brute force attempt

Resolved! FQDN Network Object on ASA-SM 8.5(1)

5525 Authenticated User Access

Removing Route-map from Cisco Pix

Changing the primary/secondary designation on ASA pair

Resolved! Is it possible to perform 'http to https' redirects from ASA ?

ASDM 7 for Mac OS - (better to read the release notes)

Load Balance with ASA

site to site ipsec vpn want to restrict bandwidth for perticular tunnel

ASA 5520 - 8.4(2) ASDM 6.4(5)

Resolved! ASA5505 Blocking Port 3101 for Blackberry Server

Create the "outside" interface on a subinterface?

Resolved! How does Firewall work ?

ASA 9.0(1) on 5510

FMC 7.4 and multi-instance FPR3130 chassis upgrades

Announcing the release of Firewall Migration Tool Version 7.7.10

FMC API to get real time VPN/S2S tunnel and CPU/Memory perf metrics

Firepower 2130 -how to resolve plugin 70658 SSH Server CBC Mode Cipher

Yubikey for authentication to protected applications on FTD

CSF 1210 CE FTD Event viewer problem

cFMC and event logging - Cannot change timerange

Application PBR in FDM

SSH with X509v3 certificates

FPR‑4145 EOL/EOS ?