Network Security

I got myself pretty excited about deploying an ASA 5525X because of the forthcoming product. It would replace our existing ASA 5520 (with IPS). But I heard a rumor that IPS and CX are incompatible in the same unit. Can anyone confirm or deny?Thanks!-...

Good Morning guys,I have an asa 5510 8.2 i have configured IPv4 and this is working fine.I am now trying to add the IPv6 configuration. We have been assigned a public /48 block which i have chopped up to /112 blocks. (dont want to use the eui-64) i h...

I'm getting this in my log buffer off my Cisco 2800 ISR. Seems like a firewall alert and  I've looked it up but, having a hard time really understanding what this really means.Should I be worried about this?Aug  2 18:27:56.380: %FW-4-ALERT_ON: gettin...

Hi Expertswhen y configure ur IPS as IDS , does the 1 sensing interface must be configured with same VLAN as the monitored Portconsider my public interface on my asa connected to switch1 int gig1/1(vlan 5) and the sensing interface connected to switc...

Hi,Is there any way to accomplish this event applet from a router on the ASA? Thanks.event manager applet ClearNAT event track 123 state any action a1 cli command "clear ip nat trans *" action a2 mail server "192.168.1.10" to "coord@cpa.com" from "ad...

Hello,I have setup QoS Policing on some traffic, and have setup schedule as bellow:time-range Traffic_Scheduledperiodic  Sunday Monday Tuesday Wednesday Thursday Saturday 08:15 to 17:00the issue is as soon as the schedule time starts (at 8:15am) all ...

Since the "zero-downtime upgrade" is not supported, I would like to validate the process I put together for upgrading a failover pair of asa5550 with the characteristics below. Specifically I am concerned with the role of the standby during the upgra...

Hello,I am having a very strange issue with connecting new machines to reach the internet.We have a ASA 5505 which the previous tech configured the DHCP pool to 192.168.1.60 - 192.168.1.110We ended up reaching our limit which I changed it to: 192.168...

Hi there,we have a pair of ASAs, one of which I need to move. For that I would like to turn off failover to be on the safe side.Turning it off is described everywhere, but not how to turn it back on correctly (so that configs will sync again etc.).So...

Hello Folks,Hope someone can share any experiences they have with ACL changes on FWSM and what impact that has on the traffic going though the FWSM.Scenario I am facing at the moment, let me build the picture using examples;----Current SetupVLANs100,...

Hello,Can anyone help?I have a pair of ASA 5505 firewalls in a failover configuration. Everything works correctly until I install the IPS module into the secondary firewall. When install I can no longer ping the firewall from the inside network. We d...

Is it possible to automatically download updates from cisco site to a local machine and then use that machine as update server?I know the second part can be done 9using FTP,SCP) option in sensor configuration. But how do I automatically download upda...