Network Security

This morning I received a relatively large number of detections for SWF.Exploit.Kit.tht.Talos .  They show as coming from multiple IP addresses within the last several days, with the first one on 12/9.   The file name is listed as adsapi.swf The Hash...

Hello,  We have a 5555-x with multiple interfaces. Our Outside interface and DMZ interfaces have routable IP addresses and DMZ subnet is routed via IP address of the outside interface.  Stripped for readability. interface GigabitEthernet0/0nameif o...

Hi team, I have a failover Cisco ASA 5525x  with SFR module with ip configured working through ASA management 0/0 (is our Backup SFR) It is connected to an access switch port. It was working as expected and I was able to ping the IP until a week ago...

Dear Team, We are using FWSM (version 4.0.11) which is managed by Cisco Security Manager (CSM) (version 4.4). We are planning to upgrade the FWSM to version 4.0.17. I need to know after the FWSM upgrade, do we need to delete the existing FWSM (versi...

Hi All, Good Day!! I am using Cisco ASA 5505 in our office and i want to deny all sites and allow only few networks. Is it possible to do like this and by using policy map i cant block https traffic. if it possble to do please some send me configur...

Hello,are there any plans to implement SSL decryption/ interception in the new ASA series (e.g. 5506-X or 5512-X)? If yes is there a road map? Kind Regards  

Dear all, I lost site to site vpn connectivity to one of remote office server from my office network after configured a static nat for public access for this server. It seems static nat is preferred over nat0 (vpn) hence i cannot access server over ...

Hi all,  I need to reset a firewall (ASA 5505) located somewhere , I would like to implement a remote reset using SSH in order to clean the configuration and with all port in shutdown... in other way with only a physical access available (using CONSO...

Hi All,   I just updated the the SFR software on the ASA5506 to the latest version 6.0, but when I try to create an access control policy it shows the following error:   after you click ok, it just shows the access control policy page without any op...

I am trying to issue command "ssh key-exchange group dhgroup14" on several of my ASA firewalls.  The key-exchange command is failing on 3 of 4 ASA firewalls.  According to Cisco documentation, this command was introducted in 8.4.  My ASA's are runnin...

Hello, I have a question on routes on a cisco asa. I setup a firewall for internet for IT users. The firewall has a management interface that we use to manage it from specific jump servers. The issue is that the IT Users need to access the mgmt(jump...

Hello, I am a newbie to the Cisco ASA world. So I am finding it difficult to understand certain configuration especially the ones configured in older versions. Can you please help me to understand the meaning of these commands: global (outside) 13 in...

Hi Friends, We have Cisco 5525 ASA Firewall, which is on Remote location and working fine. my equerry is if firewall fails/ reset, how can I login and workout, can use some thing auxiliary port or any latest process is there to login firewall in suc...

Hi Team, I've tried this step to disable the ips sshv1. I would like to know how to revert back in "#Protocol 2,1" configuration. Here is the steps: 1) Assuming that you already have a service account created. Pls login via the service account.2) Lo...