Network Security

We have an in-depth internal penetration testing under way at the moment and it is becoming clear that our Firepower for ASA sensors are not blocking traffic sourced from IPs within the $HOME_NET range.   We have a Trend Micro DDI probe at each of ou...

Greetings,   Can anybody help me know whether cisco firepower management center virtual appliance be deployed on free version of vsphere hypervisor?   Thanks

Can i lock a cisco asa 5585 firewall access list down to use 'service ports' rather than destination ports. The reason i ask for is that we are trying to configure Sharepoint 2013 on our firewall rules for the DMZ. It uses tcp/135 and tcp/53 but it a...

Just curious if I could make any sort of CLI changes on my managed devices w/o using the FMC, and if I did would those changes be synced with the FMC or is it the case that once I set up a device to be managed by the FMC that all my configuration cha...

Hi guys. I need your help. We have 2 asa, fmc, asdm. Tried to install last software updates (6.2.3), everything went good except one asa. FMC, first ASA updated successfully. But on second asa it doesnt pass readiness check. Currently it's version is...

Hello, I would like to be able to pat a device based on the destination port.  For example: 10.10.10.49 (any source any destination) ---- 10.10.10.50 (asa) ----- PAT to ----- 222.222.222.222 But also be able to do this: 10.10.10.49 (any source, desti...

Hi Guys,   Just need your assistance on this.  I'm trying to setup a GNS3 lab. Attached is the diagram.   For some reason, I'm cannot ping the devices behind the firewall. Here are the FW config.   FW1# sh run natnat (INSIDE,WAN0) source dynamic any ...

Hi,   I have an ASA5508-X running FTD 6.2.2-81 which has just gone into production, but I'd like to add an FMC virtual appliance to the environment to control the firewall. When I register the FTD to the FMC, will the on-box configuration be imported...

would it possible to configure the management interface on the 5555-x with an IP address and also set the interface IP as the default gateway of the Firepower?   I am out of available interface on the 5555-x, some cisco doc says its possible, but I w...