Network Security

Hi All,below is a snippet from an ASA pair in active/standby mode but with standby unit showing as failed.suspect it is because of the SFR missing form the standby FW (only installed on the active unit). did the no monitor-interface service-module bu...

Suddenly the FMC does not display connection events prior to September 8, 2023. While it correctly displays all "file events", "intrusion events" and "security intelligence events". Only the connection events have disappeared.FMC Version 7.2.4 

Hi GuysI am looking to set up saml for my remote access vpn. I have done this on some ASA 5545 that we have but I have come to do it on an ASAv running version 9.12 and the method on the gui does not have the option for SAML.Any ideas why this is ? d...

I have another issue on a new vFMC & FTD 2110 7.3.1 deployment. It may be an issue with my understanding or not.I currently have a rule created as below, IP's have been changed.:Source                Destination                Ports                  ...

Hi,I upgraded FMCv from 6.6.5 to 7.2.4. A few days later, my active-standby HA pair of FTD 6.6.5 devices failed over during resilience testing. FMC gave a health monitor alert about interface changes detected. In the Interface config screen for the H...

greetings!! i was wondering if anyone has come across the issue of configuring DUO SSO remote access VPN (saml), where the DAP DfftAccessPolicy Action: terminate is responsible for terminating the VPN. When the action is permit, the vpn is successful...

Hi,I have two FTD's managed by FMC. at times its cpu hits 100 % . I figured out that when there is heavy traffic passing through two interfaces the snort process chokes one cpu.there is 230Mbps data throughput between two zones/interfaces on FTD when...

Logged into my ASA this AM and I'm seeing a ton of "authentication rejected" warnings coming across from 3 different IP's.  Seems like someone trying to brute force SSLVPN.  I want to block these IP's from even being able to connect to my ASA (which ...

Dear Cisco IDS/IPS Experts,I have two questions:1. Can the Firepower IDS/IPS detect Layer-2 attack based on EtherType and MAC address anomalies?2. Based on my experience 4-5 years ago, no IDS/IPS can detect Advanced Persistent Threat (APT). The anoma...

I faced the attached error when trying to open or untar Cisco FMC virtual VMware image 7.2.4 file  I have downloaded cisco FTD image 7.2.4 also faces the same issue  

Hi,  According to the following link https://www.cisco.com/c/en/us/products/collateral/security/firepower-1000-series/datasheet-c78-742469.html, it states that for FPR1000 Series "Support for Cisco® Adaptive Security Appliance (ASA) Firewall will be ...