Network Security

So to begin, Cisco ASA i'm totally new with. One of our Fortigates is dying out though, and I had this unused so i'm attempting to install it as a learning process and replacement.    So I have a 5515-X. I had it setup easy enough as just a regular A...

I have an FMC that manages 6 SFR modules that in 5516's (not running FTD code).  ISP recently changed the public IP assignment on 4 of the ASA's so made the required changes on the ASA and confirmed working.  Logged back into FMC today to check somet...

Hello, I'm working on Analysis Intrusion Events on FMC.  I notice that a message "Internal_Event_Session_Add" is always there which shows TCP connection detected with many many counts.   After checking my IPS Policy, it said this rule is disabled. I ...

I have found some events of type Would have dropped in ASA-Firepower FMC logs. The guide explains The event type is always Would have dropped for packets seen while the system is pruning, regardless of deployment. [...]  the system sometimes prunes o...

Hi,I was tasked with installing Cisco FMC as a virtual appliance running on VMware.FMC would be configured and connected to our demo 5506-X HA pair devices. What are the steps I can take to obtain VMware ova file? Does it come with a trial license?An...

Hi Team   We need to manage the firewall in different geographical location with the management server(FMC) in our DC. My questioned are : - 1) what is the acceptable latency in ms is accepted to manage the appliance and pushing the policies ? 2) If ...

I'm having a confusing moment configuring static NAT with a Single IP address. I want to allow TCP-1723 traffic through to a server on the inside interface, while using a single IP address for this static NAT and PAT from inside to outside.    So for...

Hey guys, so last weekend I had a problem when implementing 2 Cisco 5508X ASA's.  I had the routes correct, the VLANs being trunked, mac addresses on the interfaces and even thousands of hit counts on my rule sets.  Only problem was that I was not ge...

Hello, I have events from this preprocessor signature STREAM5_NO_3WHS   I just read online that is triggering when the 3way handshake is not completed. Do you have more info o documentation?   Thank you R

Hi All, I'm trying to set up an asa5506-x with 3 local lan's and one of the lans connected via site-to-site vpn to azure I have got the local configuration working ok. And after some trial and error have got a VPN config that works in as much as the ...

I would like to remove the Default-RSA-Key from my HA ASA 5525-X with FirePower, as it was only created with 1024 bits, but I have a few questions...   If I use the command "crypto key zeroize rsa" will all the keys get removed or just the default?  ...

Hi,   I have the following interfaces on the firewall:   !interface Vlan2 nameif outside security-level 0 ip address PublicIPaddress 255.255.255.248!interface Vlan717 nameif inside security-level 100 ip address 192.168.X.1 255.255.255.0! object netwo...