Please see the below guide for TACACS+ configuration on ASA http://www.cisco.com/image/gif/paws/112967/acs-aaa-tacacs-00.pdf ... View more

Are you getting any error message. if yes please post it. Meanwhile you can check the below Tshoot guide https://techzone.cisco.com/t5/Malware-Protection-File-Analysis/Troubleshoot-Connectivity-and-Registration-Issues-with-AMP-on/ta-p/682597 Hope this help you ... View more

It should work properly as you have configured correctly. Try to block complete YouTube and check it is working or not? and if it is not working please open a TAC case fro the same. ... View more

Please check this doc http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117851-technote-wsa-00.html hope this help ... View more

you can inspect only outgoing SMTP  traffic for uploaded files. ... View more

Please check this thread https://supportforums.cisco.com/discussion/12546621/nat-loopback-asa hope this help you ... View more

The options that is offered by ASA for VPN are: 1. Site to Site (IPSec) 2. IPSec Remote Access using VPN clients (ver 4.x and 5.x) 3. EZY VPN (It uses IPSec protocol too) 4. Anyconnect (SSL Based VPN) 5. Clientless or WebVPN (Browser based VPN) The first three options uses IPSec Protocol. Now alll of them are secure however it totally depends upon your requirement. For instance, if you have many users at one location (lets say remote office) who need access to many machines at HQ location, then site to site will be a better option because if you create multiple sessions using remote access then it will not only consume the CPU but will also consume the VPN license. So site to site is used for allowing a complete subnet/subnets to talk to multiple subnets. Same is the case with EZY VPN. It has two modes. Client Mode and Network Extention modes. If your requirement is that you have a mobile user who stays out of office most of the time but he needs access to company resources then you need to go for Remote access VPN. You can use IPSec VPN as well as Anyconnect or Clientless VPN. IPSec is older VPN client which is being rolled out by cisco and the new client is Anyconnect. Anyconnect offers you more security and more features however it is expensive as compared to the IPSec VPN licenses. If your requirement is to allow user to access some of the server at HQ location and the user is out of office and does not have client installed, then you can offer him a clientless VPN access. Please let me know if this answers your question. ... View more

Please the use below link to request/submit the URL to be non-malicious: https://securityhub.cisco.com/web/submit_reputation_urls You have to login with your CCO ID. Hope this help you ... View more

Cisco always recommend to have latest code so that you can protect your organization with latest security breaches. There are lot of enhancement in new code. It would be better to upgrade with latest code and migrate your config on this new code with necessary changes.  ... View more

Please check the below link and make sure these ports are open http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/installation_guide/b_ise_InstallationGuide20/Cisco_SNS_3400_Series_Appliance_Ports_Reference.html ... View more

Please see this post https://supportforums.cisco.com/discussion/12716991/can-i-do-geo-ip-filtering-my-asa-5520 ... View more

Please check this link http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/User-Preferences.html#12687 ... View more