Network Security

I've been trying to find if there are vendor-specific RADIUS attributes for linking our Windows NPS server to views/superviews on our 2900 series routers and haven't been having any luck. I've been using privilege levels but find managing those tedio...

We were upgrading our ASA from  asa917-16-smp-k8.bin  to asa9-12-2-9-smp-k8.bin.After changing the boot command and hitting reload command,  the FW just shut itself down We had to physically pull the power cable out and plug it in back again  Any ide...

Hello everyone, Currently, we want to optimize our ACLs rules on the ASA with good naming.A week after the injection of the new rules above the old ones, we have extracted the logs. access-list DMZ:eth2 line 1 extended permit object-group gs-web obje...

I have a few trend micro servers sitting in the DMZ Zone.. i am encountering a strange issue where they intermittently become unreachable from Firewall and comes back again.. the server side network configuration seems fine and it has only one NIC.. ...

Hello All, i have installed new smart licenses to the FTDs through the FMC but on the smart software manager still shows the licenses are still not in used but on the FTDs it shows the licenses are applied. Note: i did apply evaluation licenses first...

Hi On my ASA in WCCP configuration, the hash allotment is 0%, due to which packets are not getting redirected. WCCP Cache-Engine information:        Web Cache ID:          10.2.84.6        Protocol Version:      2.0        State:                 Usa...

Couldn't fit the 400,000 character dump so I am starting from the kernel process. I also disabled logging to see if that was the issue. So far, it has not rebooted for 20 minutes, but it's so sporadic as it is, that this could be a coincidence. Thank...

Hello together, does anyone know if it is possible to negate an object or network in the policies? Unfortunately I have not found anything for this.I wanted to create a rule for Internet Access (allow any to "not RFC1918" http and https) just as an e...

We have a user that uses this app for texting and every time he sends a text, we get a notification from FMC, see below: [1:47567:2] "MALWARE-CNC Win.Trojan.Zegost variant outbound connection" [Impact: Vulnerable] From "NGFW1-ATT" at Mon Mar  2 15:42...

Hi. I am planning to setup 2 factor authentication for anyconnect clients, anyconnect vpn has already setup and working with Radius(NPS serverwith AD). i have taken subscription from Azure MFA oncloud and want to deploy second authentication using az...

I have over 50 firewalls protecting several network.  I am trying to find the best way to keep up with all the devices on the network (servers, printers, thermostats, etc)

I am trying to enable active/standby failover which I have done on another pair of Cisco ASAs. But when I attempt to configure it on this specific pair I get the following output. %ASA-1-105002: (Primary) Enabling failover.Mate's operating mode (appl...

I made a bash script to automatically fill an object group on an ASA related to Office365 IPs. The script itself get's the IPs, changes the correct syntax and leaves a text file called outfile.txt which looks something like  enable enpass conf t obje...

Hello  guysHave you come across an issue where a ASA is blocking access to an CDN.I have problem when PCs connect to  t.clicktale.net. contentsquare.com via a cookie it does not work.If we run the cookie  off the network it works fine. The Vendor is ...

Hello Experts, Having a bit of a problem trying to use ASDM to manage ASA5525 with FirePOWER installed. Now I now that Cisco Bug ID CSCuw54048 fixed this with a release of SFR 6.1.0 version but I'm still getting the same error when I try to login to ...