Network Security

I have this config but kids with Kali can enter in the Aironet and access admin network. What im doing wrong? Is any way of resolve issue withou more hardware?     Router#sh run Building configuration...     ip dhcp excluded-address 192.168.2.1 192.1...

We just cannot get Firesight to be user aware at all. I can match logon events from the DC, to the SF User Agent to traffic being processed through the SFR module, and have it either hit my unknown/Anon user rule, or be denied based on no identity. I...

Hey friends,   I recently published a blog article that extensively covers Address Translation on the Cisco ASA / ASA-x Platforms (code versions 8.4+). This guide will take you from knowing nothing about configuring NAT on an ASA to being able to con...

I have configured following policy but traffic is not redirected to SFR module so that's why i couldn't monitor any traffic at FMC! i think every thing is OK if only the traffic redirects to SFR module ! Service-Policy used ==========================...

I had a customer to wrote me saying that he is trying to install their updated license on their FMC and since they do not have FTD running, nothing is showing up their licensing portal.   can someone please assist me on how to help this customer inst...

I am slightly new to the FMC product and I have learned to do things like policies and device administration. Now I am looking at how to see what is going on. I created a policy on a new set of ASAs/SFRs that is in "monitor" mode because I want to se...

This is an ASA 5506X running 9.8(3). I need to change the IPv6 DUID to accommodate a prefix-delegation problem with my provider and, unfortunately, I cannot find any DUID related commands. Google doesn't turn up anything helpful either. Does anyone k...

Hello Friends,   I am using Cisco asa 5512 on 9.8.2. due to recent security measurement we have enabled TLS 1.2 with custom ciphers.   However, SSL LAB shows there is no support for secure renegotiation.   I wanted to know if asa support this feature...

Hello,    I have a cluster of CISCO ASA 5545 running on failover Active/standby mode.  The current version is 9.6.3.1 which appears to be vulnerable to some recent Csvs.  Can you please help me decide to which stable and clean version should i upgrad...

Hi,   I am facing this issue, the backup file which i need to restore on FMC is having VDB 304 version and FMC-4000 is having VDB 305 version so is there any way that i can degrade the 305 version to 304 to make it compatible with backup files.

Hi Guys, Is it possible to configure local user account for FMC for SSH access? How? Thanks

Hi all, I've just set up FW 5506-X, after putting DNS server behind the firewall with default "balance and security" intrusion policy, and malware blocking(I added all Category, and chose Block Malware), all pcs and even FW itself cannot use DNS serv...

I was wondering what the process was to downgrade the VDB to an earlier version.  We are working on applying a backup but are unable to because the VDB build is currently 231 and needs to be 222.  Con someone help with this?

Lets start from beginning. We have two 5515 running FTD 6.1.0.1 and a Virtual Machine on ESXi with FTD 6.1.0.1! We upgraded our FTDv to 6.2.0 and our Sensors in HA (Active/Standby) are on 6.1.0.1! After the Upgrade no Deployment of our Access Policie...