Network Security

Recently we had a problem with our asa 5580-20. To resolve the motherboard was replaced. The device seems to be working again but when I boot up I get stuck at the activation key.   Enter Activation Key    Part 1 of 5:    Part 2 of 5:    Part 3 of 5:...

Hello all   We are in the middle of deploying an FTD with IPS for a project. We have seen a large number of the following violations in the IPS event log:   Message Priority Classification PROTOCOL-DNS dns response for rfc1918 172.16/12 a...

I want configure ASA, so it requires local username and password for enable mode. Command: aaa authentication enable console LOCAL When I configure this command, I am not able to login even though the following configuration already exists: username ...

I'm literally beating my head into a wall trying to figure what I'm missing here. User can terminate anyconnect client just fine,but cannot pass traffic through to the internal network.    Very basic setup.   74.x.x.x static IP on outside interface. ...

Hi, Is there any limitation in deploying HA or Clustering between two FPRs that are located in two datacenters 10km (optical cable distance) apart? Is there something that is not considered good practice in such a deployment? The services running beh...

I have six ASA's in my Firepower management center. Two of the six have a URL filter license that will expire in less than 90 days. How can I tell which two devices are about to expire?   Thanks

Hello, I have a pair of ASA 5515-X's, and I'm trying to automate the backup command using EEM.   event manager applet backup description Backup the VPN config daily event timer absolute time 01:00:00 action 0 cli command "copy /noconfirm running-c...

We are trying to add some ASA to CSM and tried CSM 4.15 and 4.16 and get the same error when trying to add the devices   Message : Invalid device type or versionSeverity : ErrorDescription : Invalid device: The device combination of version "9.8(2)8 ...

What are the 80 categories to ASA with FIREPOWER URL FIltering, like gaming, sport, etc....

Having 12.4 version IOS in Cisco 7206 router, how to disable SSH Server CBC Mode Ciphers, SSH Weak MAC Algorithms

Community,   We are currently working on a project to integrate a pair of 4150 FTD appliances into an existing physical topology. We need to overcome a few challengers/hurdles with the design. I've attached the topology to better explain the issues. ...

I would like to rate-limit internal traffic so that no one user can hog all of the bandwidth on our network. This can occur when someone is downloading a large file. How can I create a service-policy that shapes or polices every IP individually rathe...