Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

PIX with 2 WAN's

How can I route two ADSL?s from the pix? Each ADSL is in a different PIX interface, each ADSL is offering internet sevices, but I can only set one default route in the pix, so the responses from my server goes out for the same ADSL (the default rout...

PIX 7.0 show run to show IP addresses rather than names

Hi,I was wondering whether there is a way to tell the firewall to display the IP addresses of hosts and networks rather than the names that have been configured with the names command when I do a show run.The obvious problem I have is when I want to ...

3DES/AES License

HiSomeone please help me,i need to upgrade to a 3DES/aes license, i found pix firewall license free at this link https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet,in title it says that it is for Cisco PIX Security Appliance 3DES/AES ...

Sig5813 Vector Markup Language Vulnerability - False Positives?

Seeing alot of activity with regard to this new vulnerability. The sensor is denying packets. The html is usually in the "Context" of the packet. Has anyone seen false positives for this signature?<html xmlns:v="urn:schemas-microsoft-com:vm

Authentication Token manipulation error

Dear Pros,Today I started to configured 2 IPS 4240 sensors. Each one has 4 sniffing inteerfaces.I want to configure the sensor in in line mode not as IDS mode. I have th network with multible vlans.PIX in failover mode with inside zone connected to t...

AIP SSM 6.0 ?

When I click on IPS from ASDM 5.2(1) it tells me I need AIP version 6.0.1. Checked the download site, but 5.1.1 is the latest. Anybody know when 6.0 will be available?Thanks

FTP Transfert Failed

Hi,I Have a great problem with FTP connection.In fact, I have configured one VPN between one routeur cisco 837 and other.I can connect via FTP in one machine 10.128.13.10 from the other site 192.168.1.0/24. But when I made data transfert, this operat...

PIX / ASA - Mixed Transparent and Routed mode support

Hi friends,FWSM 3.1 has announced support for Mixed Transparent and Routed mode on one single box with different contexts. Is this supported on PIX / ASA as well?Thanks and RegardsGautam

Auto-backup FWSM Config File

Hi,Can I check how do I configure my VMS to automatically backup the config file for the FWSM module?Thanks

IPS 5.1(3) never-block-networks not working

Our Cisco IDS 4200 appliances have been converted from 4.1(x) to 5.1(3) with latest signature S252. I'm going through fine-tuning and enabling countermeasures step-by-step. One thing I noticed is that even though a never-block-host for our /19 CIDR...

ASA 5505 and logical interfaces

Hi, how many logical interfaces does the ASA 5505 support ?The old PIX 506E supports 4 total logical interfaces (hw and vlan) and I expect the ASA 5505 does the same or betterthank you in advancerenato

Resolved! PIX vlan routing

Hi,Two vlans on the PIX 506 interface at 6.3 code. Is it possible to use these logical interfaces in exactly the same way as physical ones? i.e. Can access lists be applied and packets enter the firewall on vlan x and be permitted/denied to vlan y,...

Resolved! Rules Extraction from PIX 515 (PIX Ver:7.0)

Hi,I have a lot of Access Rules configured in my PIX515 and since I'm not the person in charge of this Firewall since the beginning, I'm getting lost with all theses rules...I see somewhere that you can "extract" rules and for each rule, get how many...

Failover Configured ASA 5520s +IPS with MARS monitoring

Hello,I recently installed 2 ASA 5520s in a Active/Standby configureation. They both have IPS blades in them.My question is, when I go to add them to MARS, how should I do it:1. Add both ASAs (one using the active IP and the other using the standby) ...

CSA 4.5.1.639 System Hardening Module: Strategies for dealing with WSUS

Out of the box, the Windoze Automagic Updates deployed in a domain using WSUS cause rules 900 and 974 in the System Hardening Module to fire. I can see the following as possible strategies:(a) user education, continue querying, leave it up to the us...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

PIX with 2 WAN's

PIX 7.0 show run to show IP addresses rather than names

3DES/AES License

Sig5813 Vector Markup Language Vulnerability - False Positives?

Authentication Token manipulation error

AIP SSM 6.0 ?

FTP Transfert Failed

PIX / ASA - Mixed Transparent and Routed mode support

Auto-backup FWSM Config File

IPS 5.1(3) never-block-networks not working

ASA 5505 and logical interfaces

Resolved! PIX vlan routing

Resolved! Rules Extraction from PIX 515 (PIX Ver:7.0)

Failover Configured ASA 5520s +IPS with MARS monitoring

CSA 4.5.1.639 System Hardening Module: Strategies for dealing with WSUS

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Traffic Being Blocked by Rule in "Pending Rule Order"

FTD SSE Connector Service down

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Using FlexConfig to change default command (no sysopt noproxyarp) rule

Trying to enable AnyConnect Alias

EU compliance certificate Firepower 1010 NGFW

Firepower 1010 readiness check stuck at "Please Wait"

OpenSSH regreSSHion vulnerability in FMC