Network Security

I've put the Maximum per client connections = 25 on my firewall.  Everything else = default (0). When I use the stress test tool WAPT to simulate 1-30 users, increment user every 4 seconds. While the tool was running with the above parameters, i issu...

I have an FTD 2110 Threat Defense device that I am configuring in Firepower manager.  It needs to have eigrp running on it.  I understand that eigrp needs to be configured via FlexConfig.  I have built the FlexConfig policy and applied it, and everyt...

Hi,    We realized that we can not access to a sensor FTD. The sensor was unreachable from FMC and running ssh directly to FTD didnt work, traffic was being treated fine by this FTD.  There were no any new events in FMC about this sensor. It seems li...

So I have been playing with this release and noticed some things. It seems even if I have an acl applied to the individual bvi interfaces like inside_1-Inside_7 permitting ip any any, Same-security traffic command is mandatory. As soon as I remove th...

Hi team,Kindly help to advise us on the situation below: if I add a pc with multiple application vulns into the whitelist, can the Dashboard detect and alert the admin when this PC come through the GW?Thanks in advance.Br,hainm

Hi team,I am supporting our customer on the VPN configuration. They have 02 site DC and DR, each site has 02 boxes ASA-5525 running HA mode and 02 RSA Radius Servers in HA mode for authentication. The question is when using the  RA-VPN, can we config...

After I deployed firepower o/s using cisco ovf into esxi 6.5, I got the following warning: The configured guest OS (Other 2.6.x Linux (64-bit)) for this virtual machine does not match the guest that is currently running (Other 3.x or later Linux (64-...

Hi forum,   I want the ASA to send Emails for logging purpose, but it seems to me, that the ASA cannot reach the SMTP Server at the vpn sites.   the inside Network is 192.168.61.0/24 and the vpn sites are 192.168.0.0/23. Traffic between the the Netwo...

I am currently trying to move some 5505 to 5506 ASA. My issues are that the 5505 that is currently pointed to the Old VPN concentrator using Ikev1 tunnels (Dynamic) when testing out dynamic tunnels that are connected to the 5545, My IPsec Sa's fail a...

We are using an ASA 5545 to vpn tunnel ( with NAT traversal  and ike) and then authenticate Anyconnect clients on Windows desktops. I want to capture and view the certificate the client sends to authenticate. Any ideas ?

Hi,Is it already possible using the latest ASA OS the multi-context with HostScan for remote-access VPN?Thanks

Hi Guys, I am new in cli of firepower, do you know the cli command for restarting the HA for fmc?  Thanks