Hello everyoneI am about to upgrade a NAC from 4.5 to 4.8 on an implementation that I make in a bank with 1500 users. The upgrade is due because the bank is migrating from PCs to Windows 7The implementation is in Failover (2) CAS and (2) CAM. the des...
I would be cool to see a repository of custom IPS signatures end users have created and want to share with the community.Such as how Cisco does with EEM scripts...
Does any one know what constitutes acceptable password characters on version 7.0(4)E4 of the IPS Software?I'm in the process on testing the sensors with RADIUS authentication against ACS version 4.2. ACS backs of toMicrosoft AD for accounts and passw...
Hi All,In our client organization we are going to migrate the new firewall with existing setup. Here, In the existing setup they are having Pix 525 and the new firewall is ASA (Pix is the end of the sales now). As per my understanding we cannot buil...
Hi, I have been reading several discussions on here about why the use of the MGMT interface isn't recommended for Failover, but I haven't seen a good enough reason why that is the case. Please give me some details and facts why this is a bad idea.I ...
Hi guys,I've got 2 routers, one is a 878 with an IOS lvl 12.4(15)T4 RE and second is a 1760 with an IOS lvl 12.3(6b).Even if Cisco documents are tellin me both device is supporting Net Flow, i got troubles implementing it in my system.I got a doubt a...
Shared Web Layer firewall - what is this? Is this another name for an application layer firewall filtering web traffic? We are tasked with deploying a cisco ASA 5520 as a shared web firewall. does anyone have any documentation on how this is accompli...
Hi folks,Just a quick question for you ZBF guru's. I generally manually configure routers and skip CCP express, etc. I noticed from a default CCP config it applies a class for invalid src addresses which is defined as drop, log. class-map type inspec...
Hi there,I'm trying to configure the FWSM to limit the number of tcp connections per user. I can only find a configuration which limits the entire ip subnet. Is there a similar command or a way to mimick the command on the ASA, "set connection per...
I have a PIX 501 and I have a bunch general licensing questions about this device, and I don't have any prior experience with licensing on Cisco devices, so please be patient:It comes with a basic license, but for any encryption related things, the p...
Sometime shortly after deploying my ASA 5510, I was forced to remove the default global inspection policy in order to sort out an issue with TLS over SMTP. Today, I'm having problems accessing external hosts with FTP, even in passive mode. As an ex...
Hey Everybody,My network runs through an ASA 5505. I recently started as the sole administrator at a small business and believe it or not, the previous administrator had documented absolutely nothing. Therefore I have no idea on how to access my de...
Is the 5510 Ethernet interfaces capable of Gigabit? Is there an extra licence to purchase to make this happen?
Hello,I'm a total n00b at ASA so please give me a hand I have a ASA 5540-AIP40-K9 ....so it has the standard built-in 4 GE ports + a SSM-40 module.So I basicaly just got it out of the box, updated the software and made some minor config changes.I con...
I have been fighting the ackantta virus for quite some time now. The decision has been made to lock down every port except for a select few (e.g. 80, 443, 21, 8080...)My question is, "How do I create an outbound ACL that blocks all outbound traffic e...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-26-2026 07:54 AM | ||
| 05-05-2026 09:59 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM |
