Network Security

Hi all,   Haven't been able to find an answer to this online. I'm looking to move the VM host that my FMCv is currently on to our DR site.   During the FMC outage will RA VPN users still be able to authenticate to our radius server, or does the FTD d...

I see that Snort has 8 different logging levels: logging level {alert | crit | debug | emerg | err | info | notice | warning} What are the differences between them?  I did find a listing related to Snort Web Filtering that states: LevelDescription1 -...

Ok I am not sure how to do this because I never have done it or needed to do it, but now is that time.   I have a layer 2 port-channel set to trunk on a 4500x that connects to a ASA5515x. The 4500x has vlan interfaces and these vlans are allowed on t...

Hello, I was wondering if someone can help me figure out what's happening. I'm a bit confused by it. I have a process where an inside host (192.168.2.244) is reaching out to a host (1.1.1.1) on the internet (inside host PATing to 9.9.9.9.) Of course,...

Hi Everyone,    From AWS Marketplace i bought CISCO ASAv ( https://aws.amazon.com/marketplace/pp/B00WH2LGM0) , want to setup Cisco Anyconnect.  To setup this i need pkg files Linux,mac and windows (https://software.cisco.com/download/home/286281283/t...

I have set up a lab with a fully licensed ASA+FP device in front of a TLS enabled SMTP server. Created a rule to decrypt SSL traffic using its own certificate+key, to a set of TCP ports to this SMTP server IP address. I also turned on file detection ...

Hi guys,   I want to migrate current STATE and FAILOVER physical connections from using switches in between to direct cables. I read some design concerns and ack that tshoot event troublesome.   Now I have a dedicated Port-Channel for failover and an...

We have had a detection on one of our customers network which is named UNKNOWN and has a SHA of all 0's, it has been quarantined and is creating tickets in the AMP inbox, but there is no way to tell what this is.   Has anyone seen this before and is ...

Hello    I'm testing out a new Cisco ASA 5508 x firewall and have everything work it appears apart from being able to access certain site via there FQDN. I can access these site via there ip addresses but no other way. I've attached a couple of scree...

Hey everyone.    We have several ASA units, ranging from 5505 to 5555X. Our 5555X is reaching about 55% to 60% CPU during peek hours and we are looking to replace it.   Can anyone help me with some tips on what to look at, are HW boxes still the way ...

I am converting ASA to firepower. The problem is that I need to remove the zones and int ip addresses from the original config as they are being removed and replaced with a new ip schemes.  Is there a way to edit the new sfo file to add the new int i...

I've attempted 3 time now to upgrade a 3D7125 from 5.3.0.3 to 5.4.0-763 with it failing at the same stepInstalling Sourcefire 3D Device S3 Upgrade version: 5.4.0-763Local InstallUpdate Installation Failed : [15%] Fatal error: Error running script 200...

Hi Folks, anyone have experience with how to search all the hosts running vulnerable browsers? for eg, if I run the templated report 'Network Risk Report' it has a section "dangerous web browser versions"   How do I search within my hosts to pull up ...