Network Security

Hello experts ,   I am getting a bit confused with the smart licensing feature. Not sure if i need it or not in my setup.   We are buying 2 x 4120 + 1 x FMC.   Required features : URL filtering , NGIPS , Anti Malware and firewalling.   Can someone pl...

I have a ASA 5505 and ASA 5508x. In reference to the attached diagram. I am looking to fail-over a Public IP B to ASA 5508x through ASA5505. The only reason for this configuration is the ASA5505 is with ISP A and with out paying a huge amount we can ...

Hi All, I have a fresh ASA 5520 with a blank config that I am consoled into.  It has a blank SSM-10 card installed. I am trying to configure the IPS, but every time I do session 1 from the console cable plugged into the ASA, it says "card in slot 1 d...

Hi, I am configuring a firepower 2110 following the cisco document. https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/ftd-fmc-2100-qsg.html FTD version is 6.2.2-81. I would like to configure the management interface to the s...

We are installing an FMC 4000 into our network and wanted to use the 10 gbt ports on the chassis.  We have some SFP-10G-SR sfp+ modules that we wanted to use.  Can we use them for the FMC 4000?  Are there specific sfp+ modules that we need to use?

Hi All,   We're massively cleaning up firewall rules to harden the network, but on some interface we have some permit ip any any rules which ofcourse are hit massively. I want to further investigate this but haven't done this before.   What is the go...

Hello,   I have a problem connecting to ASA 5505 via ASDM. I am able to download and start the application but as soon as I start in put in the IP address it gets stuck on the login page saying "connecting to the device". Java logging shows the error...

So we have a pair of firepower/NGfws (asa 5555x) and we are upgrading our internet connections in 3 locations...2 of which are getting a new IP space.  We do ALOT of stuff on our firewall, aside from NAT for outbound web surfing, we have statics for ...

what is the difference betwenn URL filtering Feature and URL, DNS, IP Address feature from Security Intelligence? Where should i apply the url filtering feature and when the security intelligence feature? I am confuse about these two feauture because...

Hi All,   Recently during IOS upgrade in Cisco ASA pair (active/stby), users experienced partial outage after I failed over the traffic to secondary ASA, while upgrading the primary. Basically connection table didnt get replicated completly. So how t...

Hello. I have two L3-switches, they are as default gateways for other devices and provide fault tolerance by the VRRP. On these devices i manually created ACL, the rule must be edited and added on both devices. Is there any way to configure replicati...

Despite reading for days, I feel like I'm missing something fundamental. The TID option of FMC needs sources.  Cisco doesn't provide sources?  (That's a question, maybe I'm missing something). I've seen recommendations to use AlienVault OTX and Haila...