Network Security

Hi, I am having an issue about Elephant flow in my FTD and as per the TAC we need to do flow profiling to pinpoint which traffic is causing it however, it is not an option in my environment because this will have an interruption. We think of an optio...

Hello, Is there a way to confirm whether IOS XE devices have outstanding security vulnerabilities? Ideally I'm looking for something that will scan devices or something that I can put the version number in and get a list of vulnerabilities like you ...

Hello, I have a strange issue with a FTD running latest 6.2.3 code. When using rules that requires inspection like user or url rules, the FTD will match on those rules even if it shouldn't be a match. For example I am using an Identify policy and cre...

Hi Experts,    We've configured Remote Access IPSEC VPN on ASA (9.1). Users are configured to use VPN client. From the various blogs, I see "crypto isakmp nat-traversal"command is required for NAT-T but I don't see any configs relating to NAT-Travers...

Dear ALL,   I am facing a very strange problem in ASA. I have ASA two 5516-X in active fail-over scenario. After active failover occurs traffic going through sfr facing no internet. If i restrict asa to redirect traffic to SFR then traffic successful...

Hello there,   We've migrated from CX to Firepower on a ASA5515 forced by end of support by Cisco. We have lost some functionality the customer was using on CX. One of them is the Schedule URL Filter, they allowed to navigate users to some blocked we...

Hi All I'm new to the ASA5506 and am setting one up as a firewall for our office.  I originally set it up via ASDM and one of the things I did was to change the LAN IP addresses, since then I cannot access the firewall at http://'new address'/admin o...

Hi Experts,    We've configured Remote Access IPSEC VPN on ASA (9.1). From the various blogs, I see "crypto isakmp nat-traversal" command is required but I don't see any configs relating to NAT-T in ASA.   1.Is NAT-T allowed by default in ASA... 2.Sh...

hello everyone.I study cisco by GNS3 softwhen i show service-policy，it's emptyasa5520-Version 8.4(2)- show service-policy is empty，why？ciscoasa# show service-policyciscoasa#ciscoasa#ciscoasa#ciscoasa#ciscoasa#ciscoasa# show service-policy globalcisco...

So I am very close to getting this issue resolved. I can actually ping 8.8.8.8 from the ASA successfully as you can see but cannot access the internet from the PC connected to Interface 0/1 Not sure what I'm missing, please help, somebody, anybody......

I registered my firepower box with cisco and applied token for cisco smart license. But after few days back the license page tabs "url,threat,malware has disable. I sync appliance, but same scenario.

.