Network Security

Hi,We are facing high cpu utilization issue in Cisco IPS 4255 running software  Version 7.0(1)E3. We have checked in show tech and found 80.4% CPU is consumed by sensorApp. Also we have found no packet drops on the IPS interfaces.Does anyone having a...

I have a problem with a Cisco IOS IPS to turn on the interface approximately after 12 hours the device is locked and you need to physically reboot.and restarts when the interface is disabled equipment is operating properly, the category that is enabl...

I am unable to ping the interface IP from any other vlan interfaces attached to FWSM.for eg: fwsm vlan 10                        nameif DMZ1                         ip  10.20.20.1/24      I have host  in vlan 10 , that ip is 10.20.20.100             ...

Hello,Yesterday the ASA 5585-X S40 going up to 99% cpu, I was checked almost ACL, service policy, disabled threat-detection but can't decrease cpu load. I tried some discussion, document but no luck. Result of the command: "show cpu usage"CPU utiliza...

Good Afternoon,We have a strange issue going on with our network environments. We are trying to rollout an application that is 3rd party web-based and it has multiple Java object based videos. The application is hosted by Skillsoft called Skillport.T...

Hi everybody,thanks for a great forum and ressource!Our syslogs recently started showing a specific spoof getting dropped by one of our main firewalls, an ASA. "Deny IP spoof from (0.0.4.0) to <removed public ip> on interface outside"While no harm is...

I'm trying to allow remote users RDP access to a server throough the ASA 5505.  I was able to do this with the old Billion router but i can't seem to get it to work curretly on the ASA.  Users will use the microsoft RDP client useing a public IP Addr...

Hi Experts,I need some clarification on remote network traffic forwarding on ASA Transparent firewall. As we know that ASA attempts to discover the destination MAC address by sending an ARP request or a ping. Same subnet ARP works fine, but I need cl...

I posted this over in the Web Security but didn't get any hits, just wondering if anybody has any firsthand experience with the new ASA series with the AVC (application visibility and control) and the WSE (web security essentials).  I'm looking to di...

                   Hi, Is there a way to reset/create ssh login account via ACS 5.2 GUI interface. I've lost the password for ssh login to the device. Unable to reset/login to the CLI mode of the device. Please help.

See Sig. ID 5930/0 in IME in Event Monitoring as an example.If the Alert Frequency, Summary mode of an IPS signature is set to Summarize with a value of 15, does this mean that all 15 hits receive the stated Action Taken (eg. dropped packet, deniedFl...

Thanks for reading!I want to organize these tcp ports into an object group on my ASA5520.  The ACLs are organized and I want to keep it that way.  The only option I know of is to enter the rule 7 times - doh!8443888890008081800010999011Seems like it ...