Network Security

Hi,Can someone explain to me how does a router use the RSA signature key generated by the following command: crypto key generate rsa signature The command generates only one key as shown by the show crypto key mypubkey all command.Does the router use...

Hi all,I have setup my switches to authenticate with RADIUS and fall back to the local database in case of failure.aaa new-modelaaa group server radius ADAAAserver-private 192.168.xx.xx key xxxxxaaa authentication login default group ADAAA localline ...

Hi,We had a external pen test done and we were told that our firewall is leaking internal IP address. (Waiting for the official report)I started gathering some logs and did find nmap from external to internal host. (Source was public IP and destinati...

Hello,  The chassis FXOS (FPR-C9300) with Asa modules, has reported the alarms below: [FSM:FAILED]: Bundle data ports.(FSM:sam:dme:SdPortsBundleBundleDataPorts)[FSM:STAGE:FAILED]: Update the bundle status(FSM-STAGE:sam:dme:SdPortsBundleBundleDataPort...

The quick 'n dirty: - Cisco ASAs logging informational level send to a server running syslog-ng, which is ingested into Splunk Enterprise Security.- Client wants to see xlate / NAT translations in the search of the log- Is the only way to really achi...

Hi I have 2 questions: We have 2 ASA 5525 that are setup for failover. Site A ASA was always the primarySite B ASA was always the secondary Today I logged to Site A ASA and noticed the config had changed to secondary.My first question is: can this ha...

Hi All,Was wondering has anyone bulk deployed rules on an ASA using any scripts. I am generating 10000 plus to secure each communication flow in my environment. Is there anything i need to watch out for? I know one ACE is about 212 B of memory so i s...

What are the CLI commands or where in the FMC can you see if the firewalls lost power "Up Time" or lost network connections to the outside?   We had a scheduled building generator check and some odd things happened that pointed to losing our network ...

Hello Team, I'm unable to take access of gui of ftd 2100 on box, while same I'm able to do ssh my device from same IP.Please help  Regards,Vishal

Hello,We were suggested to disable isakmp Aggressive mode on Cisco Routers and on ASAs due to vulnerability reaso.How will disabling this affect on current VPN connections on these devices? 

I have the below configuration in my ASA firewall-------------------------------------------------------sla monitor 1type echo protocol ipIcmpEcho x.x.x.x interface outsidenum-packets 3timeout 1000frequency 9------------------------------------------...

Alright experts, I need some assistance because this isn't making a lick of sense.  I have a customer running FMC 6.2.2 and AD User Agent 2.3 that is having an issue where a lot of their connection events are showing Unkown under Initiator User.  Som...