Network Security

Hi All,I have two Cisco ASA 5520 firewalls (Active/Standby) running with software version 8.0.4.32 version and ASDM version 6.0(3).I have encountered a problem while changing configuration using ASDM. The screenshot of the error has been attached.So,...

Hi gurus,I know that Cisco ships the security server (CSM) with a standalone version of CSA Agent. Is there any way to download this agent without deploying CSA MC server? I need to do the internal posture validation with Ciscosecure ACS server and c...

I created a rule in CSA 6.0 that, by default, blocks any application on any machine being connected as a server.  On a DC we made an exception for the server to be connected on UDP 53 for DNS.  However, we are seeing the following messages below.  Th...

Hi, searching hi & low, regarding intermittent disconnects for RDP sessions.Am interested in any pointers.Situation is following: Multiple RDP servers behind ASA, sometimes a user, and sometimes all users to one server from outside our ASA suffer int...

HiHow can I see the transactions between two hosts that are trying to talk to each other over certain ports .I am trying to find out ports needed to be opened for successful connection .I have tried "sh log" but I do not see those two hosts..The foll...

I have setup the ASA5510-SEC with the CSC-SSM and it is working great. What I need isto be able to provide, for the client, reports of how much time particular users spend on theInternet, where they go on the Internet etc. Do I need more product to d...

Hi, need to setup syslog server that will receive logs from an ASA firewall. Firewall has multi contexts and wondering how the syslog should be setup in this case? One syslog config for all context (from admin context) or individual syslog setups fro...

Hello folks, I am new to syslog so I want to confirm the following:Currently I have the below configured on MY4507:Question:Imagine I create an ACL "permit tcp any any eq 80 log-input" and apply to one of the inbound interfaces so that I can monitor ...

Hi, imagine I just want to find out which IP addresses are using trying to hit my server network on port 80.If my syslog server is limited in storage, I am wondering whether I could just log the first packet from a given source and target IP address....

W are running an ASA 5540 failover pair with SSM-40 modules.  When using the IME version 7.0.2 to manage the IPS we have not been successful in getting anything to work but "Deny Attacker Inline."  Nothing else works.  We have tried every option unde...

Can someone help me with this?Everything has been working great until last night. No changes were made to any configuration.All of a sudden I'm getting these errors. Let me give you a summary of the network.The remote site has two networks:10.10.30.0...

Dear all,I have dual ASA 5540 in Active/FO mode. The outside Interface is connected to a 2960 switch which then connects to a Packetshaper device and the Gateway Internet Router. The gateway router is connected to a satelite modem through a serial in...

Hi !we are currently deploying ACS 5.1 in our network, I would like to limit DCR crendentials to CiscoWorks software if-sefl not only to the server itself is it possible ?We would like to make sure nobody can use DCR crendential to open an administra...

Hi, i have Cisco works LMS3.0,i have added all routers switches, and after every 24 hours, all changes to my routers switches, i get that via email,but i dont see any change report of cisco pix firewall.dont LMS3.0 support firewall changes ? am i mis...