Network Security

Hi, I am setting up FirePower 2110. Each physical Ethernet port has 2 LED, "L" and "S". According to cisco document, "L" is Link/Activity, "S" is speed (1 flash=10 Mbit, 2=100 Mbit, 3=1 Gbit) . When I connect a port to 100MB Switch, "L" LED is on and...

Hi All,   I am working on one of the ASA 8.0(3) to 8.4(5) upgrade and have a following question on exempt NAT conversion. I did upgrade and I am getting following result, I am not sure about it.  OR is I should remove any any from ACl then do the upg...

I have an ASA 5520 that has 3 VLANs trunked to it using sub-interfaces.  My management VLAN is the inside network.  What I'm trying to do is allow all traffic from the inside network to the other two VLANs so I can manage devices on those VLANs from ...

Hi    I need to turn off TCP Timestamps on my ASA - does anyone know how to do this on ASDM?  After a security test it came back failed    NVT: TCP timestamps (OID: 1.3.6.1.4.1.25623.1.0.80091) Summary The remote host implements TCP timestamps a...

Have a strange issue here (or what I feel is strange). I have an ASA 5515X series box setup using two interfaces, inside and outside. Using NAT to translate between interfaces. Fairly simple setup. I have a handful of services I allow through the dev...

Hi i have a Firepower Management Center (FMC) for VMWare, lets call it FMC1 with ip 10.10.1.1/24. I have an ASA High Availibility pair running the FTD Unified image and this HA Pair is currently managed by FMC1. We have installed FMC2 with ip 10.10....

hi, i plan to upgrade an ASA 5525-X 8.6 code to 9.8. so upgrade path: 8.6 > 9.0 > 9.8 i've already FTP the 9.0 image on the ASA but when I FTP 9.8 i'm getting an error "No Cfg structure found" per my google search, i need to upgrade and boot to 9.0 c...

Hello, I am using an ASA on the Firepower 2110. I was trying to traffic flow between interfaces and configured one interface E1/5 with ip address 10.1.215.115/24; security-level 100 and another interface E1/6 with ip address 10.1.253.115/25; security...

Hello Everyone, Anyone can advice how to get confirmed the exact model of the cisco FTD 4100 series??? I means 4110 or 4120? Thanks & Regards,   

Hello,    I've configured aaa & TACACS+ on an ASA properly where the primary authentication method is ISE and a fallback method is local. I've created enable_15 with priv 15 and another local user account (admin_acct) with priv 15, also. I can ssh us...

Hello  I have a question relative to Control Plane Protection on a cisco router that maybe someone can help.   If I want to understand and then create control plane Protection for filtering management traffic and applied, it to host sub-interface   F...

I keep trying to force the unit into active mode, but then it just goes right back into standby ready. I'm not issuing any commands for this From State To State Reason==========================================================================15:28:56 ...