Network Security

Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It ment...

Hello everybody,our customer has FMCv rel. 7.2.5.1 and two Firepower 1120 in a HA running rel. 7.2.5.I have installed the FTD patch to rel. 7.2.5.1 successfully but the release that the FMCindicates is still 7.2.5 (see attached screen dump).Do you ha...

Hello everyone,I have a CISCO ASA 5555-X configured in multi-context mode and I want to monitor it via SNMP.However, I can't find the MIB files for this device.How can I get them?I don't have access to ftp://ftp.cisco.com/pub/mibs/supportlists/asa/as...

Hey allI have a Firepower 1010, I need to disable the SIP ALG on it, I have access to the Web Client and Telenet access to make changes, can someone give me an easy way to make these changes, I don't have the ASA Software that could access with.

Hi All, I configured anyconnect vpn in ASA and its working ok. I enabled ASDM access in inside interface (10.10.50.254). After connecting to VPN, i tried to ping and connect to ASDM on 10.10.50.254 but its not working and i get "routing failed to loc...

Hello!I´m using FMC 7.2.5.1 in Edge browser on a 1920x1080 screen with 75% zoom in the browser.When I open "Objects", the table of Network objects is shown.When I want to start flipping through the pages to find something (because "Why can´t I just s...

Hello everybody, our customer is using the FMCv rel. 7.2.5.1 and many FTDs.After de-register/re-register the FMC in the Smart Software Manger because another error message four devices (7.0.1 & 7.0.5) fourdevices show the error: Threat Data Updates o...

I have a Cisco FTD 2140 Secure Firewall that I am trying to build a route based IPSEC tunnel using VTI's. The vendor needs my proxy ID or encryption domain to be presented as a public IP address. So my WAN IP is obviously public but my internal netwo...

Hi I hope your doing well in our network infrastructure  where we have Qualys to scan for vulnerabilities i can't find a solution for this certain vulnerability here are the details :Weak SSL/TLS Key Exchange impact an attacker with access to suffici...

We have FTD devices with ASA image in production which managed by FMC and Also we are managing firewall through ASDM. so now we are removing the FMC from production and want to manage the FTD devices locally. so is there any impact if the firewall is...

With the massive number of attacks on AnyConnect and other VPN's, I've begun looking into how to further remediate these login attempts. We have MFA in place.I'm having trouble understanding how to associate a remediation with a correlation policy.Ou...

Hellocould you please share the solution for showing dropped packet from internet to inside lan ? i have FTD 4100 series managed by fmc I want to see output from cli or fmc related to nat transactions packet(dropped and passed) both.  

Hi, I'm looking at deploying BGP on an FTD Active/Standby HA pair (FTDs are 4215 hardware running 7.2) to enable routes to be controlled by neighbouring routers rather than relying on 100s of static routes on the FTDs. I was wondering if anyone could...

Hello, we recently had our cert for our VPN expire without notification via alert message. I've done some research in the FMC but can't find anything that monitors certificate expiration dates. A google search points toward REST API's of course but t...

Is it possible to run Radius with Cert and Radius only on the same interface. I have different profiles for the two. but they share the same tcp port. Need to do a POC, and it would be much easier to have user login with just Radius, not Radius and c...