Network Security

Has anyone had experience where traceroute working from VLAN X but from Y? Traceroute works upto default gateway but at ASA, it does not work. policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 ...

Hello. we bought a firepower lice for 5506-x one year service. however, due to some project work we have to delay the deployment for 4 month. my question is if we never use our 1 year lice until next 6 month will we left 6 month to use. or once we re...

ASA 5550, software version 9.1(7) Error message: Deny IP spoof from 192.168.54.114 to 192.168.10.1 (on interface MGMT). interface GigabitEthernet0/1 nameif inside-srv security-level 100 ip address 192.168.10.1 255.255.255.0 interface GigabitEthernet...

Hi *, since I do not open bugs at Cisco anymore (steals way too much time from my life...), at least I want to inform the community (and even Cisco, if there is someone reading theses forums) about a new bug in ASA 9.6.1 (all versions, including the ...

Cisco ASA supports DCE/RPC inspection. Is there any way to make it inspect DCOM so that OPC classic (DA, HDA, A&E) application too can be allowed thru firewall just by allowing TCP/135 port?

Hi;  i want to re-image my module SFR; i have asasfr-5500x-boot-5.4.0-763 in an ASA 5512-x ( Version 9.2(2)4 ) the module SFR is up now and i activate a licence for URL feltring and AMP and IPS, if i do re-image him to asasfr-5500x-boot-6.0.0-1005; d...

Hi Everyone, I am facing an issue with my network traffic. The issue is my Firewall has 5 Interfaces  1 - Outside 2 - DMZ 3- Network A 4- Failver 5- management  nameif inside security-level 100  ip address 10.10.10.1 255.255.255.0 standby 10.10.10....

Dear all, I have an DC 750 Firesigth Appliance that manages 3 ASA 5515X Firepower modules. Last week I have upgraded the appliance and the modules to version 6.1.0.1. Since then i have an issue obtaining updates and generally connecting to the sourc...

Hi,       we have 2 cisco 8130 NGIPS with Bypass 10 Gbps LR Fiber Network Modules, can we implement device High-availability by using this modules. or we need to purchase Non-Bypass network modules to achieve device High-availability . i think we can...

I have ASA models 5515X & 5516X serving different office networks. They each have a slightly modified default policy-map and provide routing between inside networks where most traffic is controlled through security level or some simple ACLs. Would tr...

Hi, I am getting the following on my asa firewall 1 ) Jan 15 2017 10:17:19 106015 10.0.1.34 63547 1.1.1.1 80 Deny TCP (no connection) from 10.0.10.34/63547 to 1.1.1.1/80 flags PSH ACK on interface Inside 2 ) 6 Jan 15 2017 10:17:19 106015 10.0.1.34 ...

i have two public IP address that needs to be configured to ASA5505-UL-BUN-K9 of which are these 196.46.80.189 and 196.46.86.5 respectively and are in the same network and both has internet.the 196.46.80.189 is the IP given to my clients to access th...