Network Security

I have a network with active directory domain and RedHat IDM domain. The one way trust establihed between domain.Ad users can login in Linux Workstations. Active director have installed agent. Windows workstations works fine. On linux machines netbio...

Hi,we are trying to decrease the number of deny logs logged in our SIEM.The approach is to disable message 106023 and to log only 106100, by adding "deny ip any any log" at the end of all access lists. This way we are receiving summarized deny logs i...

ASA 5510 when connected to the electric current and starts to start it goes black.does not allow settingRegards

I created a custom correlation rule that basically says if you see any DNS (port 53) traffic that does not contain IP address ) xxx.xxx.xxx.xxx (our internal DNS Server) then fire rule and send an email alert (configured under alert section).The issu...

Hello! There are no backups, no old updates: /dev/vda7 38G 35G 675M 99% /var What can I remove to clean up some space? Thank you! 

Hi, I have a Cisco ASA5505 with old software 8.2(5) and i would like to update it, but the interim 8.4(5) is not available for download. Any idea? Can I go straight to 9.2.(4) or can I download the interim 8.4(5) from somewhere else? Please advise

I am starting to see these messages on our firewall and it's dropping some Avaya connections. We are not low on memory nor we are doing NAT as these are internal firewalls only so I don't think the description from Cisco is valid for us. There are ar...

Hi Guys,Just want to check with you if it is possible to block east-west traffic in FTD? Those endpoints which are within the same VLAN or network.Thanks

Is there a way to limit the number of retries a VPN user has to authenticate? I found the aaa local authentication attempts max-fail command but our ra VPN uses certificates for authetication so I am not sure if the max-fail command would work.

Hello team, What if we want to monitor a destination which is reachable through a Site to Site VPN? I have configured it by using the inside interface to source it, but unfortunately this is not working. Below my config: sla monitor 20type echo proto...

I am going to log a tac case the next time it happens, but I have had four ASAs reboot twice today at the same time, in different Data Centres.  Crashinfo files are in the flash, but just wanted to see if anyone has seen this before? Note they are on...