Network Security

Resolved! Dear Cisco engineers, kindly update Integrated-Versions in CSCvz70310

And also bug description is not correct for the following reasons:- this issue affects regular NAT configurations and not only net-snmp- it always happens when tmatch compile thread is running, no matter how many NAT rules you haveSo, true conditions...

9396PX Terrapin Fix/patch

Good morning,I realize our 9396PX's are EOL but we won't be replacing them until later this year. These devices are currently popping hot on the "SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795)". When I do a "sh ssh key rsa" it shows only S...

FMC backup failure/Snort update install failure

Recently my backups and Snort updates started failing. My backup error is "Registration or CSM state are blocking Backup" and the Snort "Install failed at installing policy package". I do have a TAC case open, but they are taking their time. I am run...

Resolved! ASA: IKEv1 AND IKEv2 tunnels on the same context?

Hello everybody,a customer has a ASA5516-X running 9.16(4) with two contexts. He is using onecontext for remote access by AnyConnect with IKEv2. The other context was usedjust for IKEv1 tunnels until now.Now he need to start to convert IKEv1 to IKEv2...

Cisco IPS logging to external syslog

If you use Cisco system-provided IPS policies ( for example balanced connectivity and security) instead of custom IPS policies which are based on system-provided IPS policy, how do you enable and configure external syslog logging?

ASA 5506 loses SNMP connectivity after upgrading to latest firmware

Hello,After upgrading my ASA 5506 to the latest interim available firmware asa9-16-4-42-lfbff-k8.SPA, or to any of the most recent firmwares such as asa9-16-4-lfbff-k8.SPA, the monitoring over SNMP stops working. We use N-central to monitor uptime on...

CBS350 - openssh vulernability

A network scanner of ours is detecting our CBS350s running Version: 3.4.0.17 vulnerable to CVE-2023-38408 where it detected SSH-2.0-OpenSSH_7.3p1.RL via SSH. Is this just a false positive or will this be addressed in future firmware updates? I am on ...

Resolved! not able to exit out of firepower-module> on Cisco FTD 4100

Hi All, I am not able to exit out of the firepower module back into FXOS from Cli. I tried exit command also tried ~ as well. but it does not accept the command. We have changed the management ip of the chassis and we are able to access it via SSH ...

Resolved! Upgraded ASA, lost ASDM

Hello,I just upgraded my ASA 5516x HA pair firewalls from 9.8>9.16.Upgrade went fine and everything seems to be working as it should.Replication completed successfully, failover status is good, vpn tunnels are connected.Before the upgrade I copied a ...

FTD: Unable to reach Cisco Cloud from the device

Hello everybody, our customer is using the FMC rel. 7.2.5.1 and a HA pair of two FTD4115 runng rel. 7.2.5. Since the upgrade of the firewalls he get the following error message on both devices: Threat Data Updates on Devices Cisco Cloud Configuration...

Resolved! Repurposing ASA 5510 Firewall - Seeking Guidance

Hello Cisco Community,I'm currently tasked with wiping and securely removing data from ASA 5510 firewalls and higher models. While I understand these devices are End-of-Life (EOL) and no longer receive official support, I'm interested in exploring po...

Resolved! unable to configure stateful failover in Cisco ASA

Hi, i was trying to configure Cisco ASA pair in Stateful Failover Active/Standby.When i try to configure Stateful link i get below error, What to do ?i want to share Failver link and Stateful Failover on same single Ethernet linkCurrent config: fail...

Resolved! FTD 3150 Standby firewall logging issue

Hi Community expert, I need your help to under the below requirement.Current scenario: We have cisco Firepower 3150 manage by FMC, we have seen that the active firewall logs are receiving on syslog server but standby firewall logs are not coming on t...

Did you choose password type 8 or 9?

We aren't required to follow a certain direction, but I know 2 years ago NSA & NIST essentially said use 8 because 9 wasn't yet vetted. Cisco had or does recommend type 9. What did you go with?Finally upgrading from the ones you can just paste and se...

Resolved! Cisco ASA Site-to-Site VPN

I have a 2-part question for setting up a site-to-site VPN with a vendor.Question 1We have /28 subnet assigned to us from our ISP. Our ASA is using .2 and our default route is .1 to the ISP. I do not want to set this site-to-site VPN up using our .2 ...

Network Security

Forum Posts

Resolved! Dear Cisco engineers, kindly update Integrated-Versions in CSCvz70310

9396PX Terrapin Fix/patch

FMC backup failure/Snort update install failure

Resolved! ASA: IKEv1 AND IKEv2 tunnels on the same context?

Cisco IPS logging to external syslog

ASA 5506 loses SNMP connectivity after upgrading to latest firmware

CBS350 - openssh vulernability

Resolved! not able to exit out of firepower-module> on Cisco FTD 4100

Resolved! Upgraded ASA, lost ASDM

FTD: Unable to reach Cisco Cloud from the device

Resolved! Repurposing ASA 5510 Firewall - Seeking Guidance

Resolved! unable to configure stateful failover in Cisco ASA

Resolved! FTD 3150 Standby firewall logging issue

Did you choose password type 8 or 9?

Resolved! Cisco ASA Site-to-Site VPN

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

FDM to FMC license transfer

Cisco Stealthwatch ipfix exporter

FTD Configuration Resource Utilization

FMC - Error mesasge: Unable to reach Cisco Cloud from the device

CISCO FXOS Upgrade - API

FPR 3105- Migrating 2 Subnets in same zone

Cisco FPR 3105 Licensing

FDM Configuration for one static public IP

FPR 1120 reimage problem

Unable to SSH to FMC after enter some command line