Category Archives: ASA

Resetting admin password on Cisco Sourcefire module

If we forgot a password for the user admin on our SFR module, we will find ourselves in a problem, sooner or later. We don’t have to know this password in a regular operations, but for troubleshooting purposes, we cannot … Continue reading

Posted in ASA, Cisco, FirePOWER, FireSight, Security, Sourcefire | Tagged , , , , | Leave a comment

Upgrade Cisco Sourcefire to 6.2.0

Ok, first of all apologies to all of you guys for being away so long, I was very busy. Still am, but I have recently completed an upgrade of the Sourcefire system to version 6.2.0, so I thought to share … Continue reading

Posted in ASA, Cisco, FirePOWER, FireSight, IPS, Security, Sourcefire | 8 Comments

Sourcefire Correlation Policy – Compliance White Lists

We should have in mind that the Sourcefire is not by any means a SIEM solution. This correlation thing is most powerful weapon of SIEMs, but with Sourcefire we have the also some capability to correlate different events. The main … Continue reading

Posted in ASA, Cisco, FirePOWER, FireSight, IPS, Security, Sourcefire | Tagged , , , , | 7 Comments

Sourcefire Security Intelligence

Let’s talk a little bit about a nice capability of Sourcefire system called “Security Intelligence” (SI). With the SI we have the option to block the traffic based on its reputation, before it reaches detection engine. We had this functionality … Continue reading

Posted in ASA, Cisco, FirePOWER, Firewall, IPS, Security, Sourcefire | Tagged , , , , , | 18 Comments

Sourcefire Access Control Policies – Part Two

From our previous blog, we have our SFR module passing all the traffic. We talked a little bit about Access Control Policies (ACP). Let’s now deep dive into details of these policies. Our topology has not changed from last time. … Continue reading

Posted in ASA, Cisco, FirePOWER, Security, Sourcefire | Tagged , , , , | 3 Comments

Sourcefire Access Control Policies – Part One

Let me stress out one more time that this blog series is all about ASA5500-X with the SFR module. Some things described here may be different for physical appliances. Now we have all installed and set up and we want … Continue reading

Posted in ASA, Cisco, FirePOWER, Firewall, Security, Sourcefire | Tagged , , , , | 7 Comments

Recovering ASA Sourcefire Module Password

By now we have completed several steps with regard to our Sourcefire deployment. We have Defense Center up and running, our modules are installed, set up and connected to Defense Center. We did lots of work in order to make … Continue reading

Posted in ASA, Cisco, Security, Sourcefire | Tagged , , , , | 2 Comments