Network Security

IPS signature update

Dear allI got the quotation for CON-SU3-AS1A10K9 from some vendors, I want to update my IPS signature automatically from cisco.com.Is it valid for this purpose?? Could you please explain me about this product number what does it do. will I be able to...

Upgrade issues migrating NAC 4.1.6 to 4.8.0

Upgrade issues migrating 4.1.6 to 4.8.0 passing through 4.6.1 here theprocedure that I followed:[root@CAM store]# tar xzvf cca_upgrade-4.6.1-NO-WEB.tar.gz<<Information not displayed>>...[root@CAM store]# ls cca_upgrade-4.6.1 cca_upgrade-4.6.1-NO-WEB...

CSM 3.3

Is it possible within CSM 3.3 to run an a adhoc report to identify devices whose policies is different to the policy configured within CSM.

Resolved! ASA 5505 licensing query.

Hi,I have a client with a requirement for 2 internal lan segments to be able to reach the outside(internet) some static NAT's will be setup to expose services in the DMZ( possibly on the inside aswell using cut-through proxy for temporary access at t...

Cut-through Proxy uauth timeout question

We currently use a cut-through proxy-like feature on Juniper SSG firewalls for our guest wireless network that allows a seven day (168 hour) timeoout, which matches the DHCP lease time. This extended time is not a problem with the SSG since it maint...

Cannot find ASA-SSM-10 on downloads page

I want to upgrade the IPS module on an ASA but i cannot seem to find the right model number in Cisco. It used to be under Security -> IPS -> IPS modules for ASA -> AIP-SSM but i can only see AIP-SSC.Where did AIP-SSM go?

High Memory Utilization of ASA 5510 after upgrade to OS 8.0

Hi,I have upgraded my firewall OS from asa707-k8.bin to asa804-39-k8.bin after which the memory utilization has suddenly shoot to 90-95%.Have tried many options available to identify the cause such as disabling threat detection,shortening the access-...

asa 8.3 multiple static PAT's to the same server/Network_object?

Hi all,Something I have found a bit confusing and am not sure I am doing correctly with the new "network object" setup is this:Say I have several servers behind 1 public IP address and several publically accessable services running on the different s...

Route in ASA with two ISP

Hello!!I am going to implement a new ASA 5520 in a network with two ISP, but I have a question with the route because with one provider the user can access to internet but with the second services provider the user have the e-mails, so this is the to...

SR520 PPTP Pass Through Configuration

I just installed a new SR520-FE-K9 at a customer's business. I can't see anyway in CCA 2.1 to configure a pass through PPTP VPN to their Windows 2003 server, which acts as the VPN server. You can easily configure port forwarding for port 1723 to th...

Resolved! Problem with NAC and Active Directory

Hi.Please I need help.I have my server with the "Active Directory SSO" started, but when a user try to connect to the network with his credentials that have in the Active Directory, the agent PC say that "Invalid username and password"My server is li...

DMZ server access from inside using (public) DNS name

Hello,Citrix server is in DMZ (off of ASA) and its pvt ip being translated to public IP for external user connectivity . Everything works from outside (ex: http/s:haccess.xyz.com, ping to haccess.xyz.com etc) . Now, the internal user residing behind ...

Resolved! Transparent Mode firewall denying ESP packets inbound

I configured a transparent firewall and found problems of not being able to ping devices reachable via the tunnel when forming a VPN connection from my laptop out to another firewall, while looking at the log view on the transparent firewall, I notic...

ASA5510 - Barracuda Webfilter VLAN/Trunk?

Below is Ethernet0/0 and it's subinterfaces. The physical Ethernet 0/0 is connected to a Gig port on a 2950T that is set to trunk.I'm not using the native vlan but is the ASA dropping the native vlan data from the switch since the physical interface ...

Resolved! Cannot reach VPN Clients from Internal?

Hi Folks,I have an ASA 5510 (8.2.1) set up with IPSEC VPN clients and am having a strange issue getting two-way connectivity in place. High level configuration as follows:NetworksInternal_Network (user desktops, servers, etc; hangs off a 48-gbport L...

Network Security

Forum Posts

IPS signature update

Upgrade issues migrating NAC 4.1.6 to 4.8.0

CSM 3.3

Resolved! ASA 5505 licensing query.

Cut-through Proxy uauth timeout question

Cannot find ASA-SSM-10 on downloads page

High Memory Utilization of ASA 5510 after upgrade to OS 8.0

asa 8.3 multiple static PAT's to the same server/Network_object?

Route in ASA with two ISP

SR520 PPTP Pass Through Configuration

Resolved! Problem with NAC and Active Directory

DMZ server access from inside using (public) DNS name

Resolved! Transparent Mode firewall denying ESP packets inbound

ASA5510 - Barracuda Webfilter VLAN/Trunk?

Resolved! Cannot reach VPN Clients from Internal?

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

How to assign a parent/base policy to an access policy with FMC API

Firepower 7.2.1 - Issue with the FlexConfig Text object override

Private VLAN's interaction with ESXi and firewall

Packets appearing in ASP DROP?

What is PID when we try to integrate with Cisco API's

FMC API - can not associate a prefilter policy to an access policy

What is the result of placing, on ASA outside int, ACL...

On ASA5525 with vanilla setup, need to place ACL on outside int?

CSR 1000v ACL syntax-- use wildcards or masks?

SFR sensor upgrade fails readiness check