Network Security

A CA cert seems to be tied to my SSL VPN configuration that when a user connects it checks for this cert on their machine, how can I remove this validation since we are moving to MFA with DUO, I have machines that do not have certs that fail because ...

Hi, I have an ASA5510 running ASA version 9.1(6) and need to be able to ping it from the internet.  I've made these changes using ASDM (version 7.6(2)): in Firewall > Service Policy Rules > inspection_default > Rule Actions, I enabled “ICMP” in Firew...

Hi all, I need to make a copy from cisco asa to TFTP moreover add information of the timestamp in the name o of file like this: tftp://192.168.25.25/switch0--Aug-30-2018-14-45-52.571-GMT.cfg-1 This example above is configured in the switch but I cant...

So to begin, Cisco ASA i'm totally new with. One of our Fortigates is dying out though, and I had this unused so i'm attempting to install it as a learning process and replacement.    So I have a 5515-X. I had it setup easy enough as just a regular A...

I have an FMC that manages 6 SFR modules that in 5516's (not running FTD code).  ISP recently changed the public IP assignment on 4 of the ASA's so made the required changes on the ASA and confirmed working.  Logged back into FMC today to check somet...

Hello, I'm working on Analysis Intrusion Events on FMC.  I notice that a message "Internal_Event_Session_Add" is always there which shows TCP connection detected with many many counts.   After checking my IPS Policy, it said this rule is disabled. I ...

I have found some events of type Would have dropped in ASA-Firepower FMC logs. The guide explains The event type is always Would have dropped for packets seen while the system is pruning, regardless of deployment. [...]  the system sometimes prunes o...

Hi,I was tasked with installing Cisco FMC as a virtual appliance running on VMware.FMC would be configured and connected to our demo 5506-X HA pair devices. What are the steps I can take to obtain VMware ova file? Does it come with a trial license?An...

Hi Team   We need to manage the firewall in different geographical location with the management server(FMC) in our DC. My questioned are : - 1) what is the acceptable latency in ms is accepted to manage the appliance and pushing the policies ? 2) If ...

I'm having a confusing moment configuring static NAT with a Single IP address. I want to allow TCP-1723 traffic through to a server on the inside interface, while using a single IP address for this static NAT and PAT from inside to outside.    So for...

Hey guys, so last weekend I had a problem when implementing 2 Cisco 5508X ASA's.  I had the routes correct, the VLANs being trunked, mac addresses on the interfaces and even thousands of hit counts on my rule sets.  Only problem was that I was not ge...

Hello, I have events from this preprocessor signature STREAM5_NO_3WHS   I just read online that is triggering when the 3way handshake is not completed. Do you have more info o documentation?   Thank you R

Hi All, I'm trying to set up an asa5506-x with 3 local lan's and one of the lans connected via site-to-site vpn to azure I have got the local configuration working ok. And after some trial and error have got a VPN config that works in as much as the ...