Network Security

Dear Expert, I am deploying a cisco firepower and don't want to use mgt port. I want to use outside interface ip address to the sfr module. Is is possible?? Please suggest.   Thanks....

I used "no http server enable" & also removed any configuration related to ASDM.  I also removed all static nat statements. When I port scan my ASA public address I still see the ports open hours later.        Goodyear# sh run: Saved:: Serial Number:...

Having an issue accessing web server from public internet. I set up some PAT rules & permitted the traffic in my outside acl. When I do a packet tracer it says my ASA is configured to allow access to the server from the outside which I include below....

I have One Firewall cluster (Two Firepower 4120) with port-channel configuration to Cisco Nexus 7K with VPC.   There lots of drops on Firepower Port-channel2.86 interface and no drops on Cisco Nexus 7K VPC interface.   Here is output of Port-channel2...

What could be the possible reason for a SYN Timeout when an ACL rule is set for that specific traffic? I am thinking that something on the remote side is causing the handshake to not complete. But could there be any other possibilites that would caus...

Is there a way to NAT port 443 and 80? If so, how does it work if a user goes to http and https?   thank you! LN

When the command "sho access-list" is performed, it allows the admin to see what hit counts have occured against each line within an Access-list statement. However it does not show a hit count with reference to object groups in the ACL.How can one d...

This may be an obvious answer - as in a bad idea - but is there no way to have the FMC/FPwr sensors generate an email alert when being portscanned?  The policy is working and dropping traffic as it should, and has been - but I can't find the proper i...

I am running an ASA5506 with Firepower and FMC 6.2.2.2, and have a question about how rules interact.  Please pardon me if this has been asked and answered.  I searched through the posts but did not see an answer. My question is about inspecting the ...

After upgrading to 6.2.2.2-109 I received a warning that the application rule doesn't match any applications.     The rule was set to match evasive/stealth tactics.   When I check the rule, there's no tags or categories available.   Was this removed ...

I want to make sure I'm not missing an alternative to managing FTD with FMC over IPSec.Currently my FTD installations at remote locations are anxiety-ridden. I'm fortunate in that I've been able to lab the FTD locally and deploy a config from our FMC...

ASA5506 ver. 5.4.1 When I try to upload an update file (Network Sensor Parch 5.4.1.8) from my computer in ASDM console, I get an error Bad Gateway "The proxy server received an invalid respose from an upstream server”. 

I am using Cisco ASDM 7.3 for ASA on our network and am getting the following errors. I am a novice to Cisco firewall so any help would truly be appreciated. Thanks in advance. Here is the error:   Deny inbound UDP from 172.16.0.2/1645 to 10.0.0.30/1...

Hello,   I an in the process of installing a FP2110 with an ASA image. The version installed is 9.9.2. I cannot connect via SSH. ASDM runs without a problem. This is the output of 'ssh debug 128':   server version string:SSH-2.0-Cisco-1.25SSH0: recei...