Network Security

I have some locally managed FTDs. I'm parsing syslog data for VPN auth failures. The FDM FlexConfig won't allow some of the simplest changes like "no logging hide username" (bug). Anyway, most the AAA user authentication errors indicate reason = Unsp...

HelloWe have a lot of clients getting the following error when contacting diffrent sites:  ERR_SSL_PROTOCOL_ERROR, we have read that SonicWall and Palo Alto also have these problemes. Solution is to turn off "TLS 1.3 Hybridized Kyber Support" in chro...

Hallo,Is there a way to simulate a DoS attack in CML? I am doing a lab on CoPP and an attack is required but I am unable to generate this. Thanks.

Hello Folks, I have a pair of ASA5516 with HA mode, ISP provides a high-speed WAN 500Mbps up/download, while doing some speed tests recently we noticed that all our tests from the inside network are not bypassing 100mbps, I checked all inside/outside...

Hi Guys.We are running Firepower 3140 Appliances. There are 2 * 40Gbps connection. The Physical (ETH2/1) 40Gbps interface has the MTU set as 9000 whilst the Sub Interface (ETH2/1.10) and (ETH2/1.20) has the MTU still at 1500In this scenario,1. Is the...

Hi,I found information about the latest device drivers:ASA 5505 - 9.2(4)33ASA 5510 and ASA 5520 - 9.1(7)32Why can I only download version 9.0.4 Interim on the cisco website?https://software.cisco.com/download/home/280582808/type/280775065/release/9.0...

Hi, I've inherited an issue that i'm a bit confused with networking isn't really my wheelhouse I've recently been trying to patch our Cisco ASA 5525 which is running ASA Version 9.16(4) which looking at the documentation it appears that it isn't supp...

I need to upgrade vFMC to 7.2.5 version but at this moment i don't want to upgrade my FTD to new version , my FTDs are at version 7.2.4 , will FMC be ok managing lower version of FTD?   Thanks

when i try "Onboard FTD Device" in CDO, at step 2, there isn't any Access Control Policy to choose.Has anyone encountered a similar situation.

Hi We have to configure a RB VPN and am wondering if I add the new VTI Interface to The exsisting outside security group or do I have to create a new security group, the outsdide Security group has the Internet facing Interfaces in it.??Thanks 

Dear Community,I am running Cisco ASA 9.8. I have an app server sitting in the DM Zone that needs to be authenticated with Google Service (reCAPTCHA) only, but I am not allowing the internet service, not the application server. I have tried to apply ...

HiWe cannot get our FTD/FMC to send logs from Security Intelligence events to our syslog servers, we are running version 7.2.5.x - the logs is missing when blocking is done by "Event type" Security Intelligence - "Reason" IP Block.Does anyone know ho...

Hello everyone, is it possible to generate a report or something that says how many minutes during the month  or last 3 months, a FTD was out? For example, if I go to "Monitor-statistics" I can see the uptime of the device, that is, how long it has b...

Hi I have an access control rule that permits traffic from server to another server via tcp/5000 and an intrusion policy is applied to this rule.there is one intrusion rule hitting where the rule definition has in the destination ports different port...

Hello all,Recently there is a request from my user to use a software "Sonobus" that can allow other users to join together to share their audio recording. This looks like to be the peer-to-peer UDP traffic. Sonobus I decided to go ahead for testing i...