About randy27-2000

randy27-2000 · 07-08-2017

I have multiple networks that come together into an aggregate. Each network have its own routers, host and perimeter firewalls and switches. Each network is mirrored to look exactly the same. I have a management network that come off the aggregate...

randy27-2000 · 07-10-2016

Recently we deployed new 5515-X ASAs. The firewall and the context were added to the Cisco Security Manager 4.7 client. After attempting to add the IPS sw-module, I get the following error message: Failed to communicate with device. Cause: Getting...

Re: ROM-MON upgrade fails · 01-16-2019

Was there a resolution for this issue? We are having the same exact issue with the rom-mon update but not on all routers.

randy27-2000 · 07-11-2017

Marvin, Thanks again for your support. Your suggestion for using Wireshark to look at the SSL handshake pointed me to the culprit causing the problem. Turns out it was a McAfee Web Gateway in the network that, for some reason, decide to block the web...

randy27-2000 · 07-10-2017

I do have a question concerning licensing for the ASA firewalls. The ASA 5515s have the Security Plus license and Encryption DES and Encryption-3DES-AES enabled. I also run "show run all ssl" to display current ssl configuration. It looks like ssl...

randy27-2000 · 07-10-2017

I understand what your saying about SSL traffic traversing the firewalls. Both the perimeter and host firewall on the problem network had http server enable and allowing the management network through. Along with that, crypto is configured on both ...

randy27-2000 · 07-09-2017

Marvin, Thanks for the quick response. I did the packet tracer from cli on the trouble network perimeter firewall and saw normal traffic to include three-way handshake, pushing of packets, reset and fin. So nothing out of the ordinary. BTW we have...

Member Since	‎07-10-2016 05:37 AM
Date Last Visited	‎01-18-2019 04:06 AM
Posts	8

User Statistics

User Activity

443 traffic blocked for external network

5515

Re: ROM-MON upgrade fails

Marvin, Thanks again for your

I do have a question

I understand what your saying

Marvin,