Network Security

Hi,I have a pair of 2110 FTD firewalls in HA that are currently managed locally VIA FDM and have config (rules, routing) on them. I am required to add the FTD firewalls to an FMC, so they can be managed through the FMC. How do i move the configs(rule...

We have several VLANs on the network, and some devices on the management VLAN are experiencing significant packet loss.I suspect there might be an issue with the firewall pair. When I checked the interface for the management VLAN, I noticed traffic o...

Hi, my company uses a Cisco 4115 FTD version 7.2.7 to provide remote access for company employees. Cisco Secure Client and Cisco ISE are used as part of this solution. In a recent penetration test, the auditors advised that we disable cipher suites t...

Running FMC 6.2.3.3 with multiple domains with FTD 2100.  Added network objects which are visible when scrolling through the object pages.  But are not seen when using the search filter and entering the ip address or name.  Nor are the new objects sh...

I have an odd situation involving two ASA firewalls.Firewall 1 is our main firewall, an ASA5585-X. Firewall 2 is an ASA5506For reasons that aren't germane to this problem, one of our research groups is required to place their server and its attendant...

Hi to all,i am posting this in order to have your opinion about it.Today our users behind the FTD faced timeouts as well as high RTTs.Digging a little bit i noticed that CPU core 16 (not the other cores)  was continuously steady at 100%. After disabl...

Issue:After software upgrade on the FW the VPN session not recieving the right Group-Policy from ISE. Even when ISE gets all the information of the user from AD (no change here), the authorization policy that was matching before is not matching anymo...

We are moving our primary internet to a new location and will have a new public IP and gateway. Is there a way to assign the new IP to the outside interface of the FTD, and somehow keep all of our Site to Site VPN tunnels using the existing IP (yes, ...

Hi theirI m using cisco security manger 4.7 every thing was normal but now i can't find all my firewalls on the device liste, even though i can see the events detected by the disappeared FW, Also adding a FW to the device liste, it disappears  direct...

We have an existing FTD 9300 running in multi-instance mode.  We have a handful of firewalls on this appliance that are managed with FMC. I'd like to migrate the firewalls to a new FTD 3130 but I'm having trouble finding any specific FTD to FTD migra...

Hi everyone,days ago when i open CSM client i noticed my device list is empty. all firewalls was disappeared.when i check CSM's process status, DCRServer is shown as "Failed to run".After checking DCRServer.log, its look like there is a expired certi...

Hi Guys/Galls/Other,  I've deployed a Firepower 1120 with FTD on FMC. However I'm a bit miffed that the chassis name on the device management page is just "Firepower:443"Is there a way to change this or am I out of luck because the chassis manager ju...

SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) in cisco Catalyst 9300 We have run vulnerability cisco Catalyst 9300  and we find the above  vulnerability. All software is up to date.#show ip sshSSH Enabled - version 2.0Authentication method...

Hello everyone,I'm currently working on a lab with Cisco ISE version 3.2 to set up authentication for Stealthwatch version 7.1.2. However, I'm facing issues configuring the Cisco ISE CA for Stealthwatch, and I can't complete the authentication setup....