Hello I was wondering what sort of path and direction to take on learning more about the security aspect of Cisco. I am getting acquainted with the ASA setup and then I see the NGFW (CX IPS?) and then FirePOWER (also part of the NGFW platform??)....
Hi Everyone, Cisco ASA has Ikev2 tunnel to PAlo alto firewall. ASA is receving packets but no transmits show vpn-sessiondb l2l Session Type: LAN-to-LAN Connection : 184.71.194.134Index : 36 IP Addr : 184.71.194.134Protocol : IKEv2 IPsecEncryption...
Hi,I am just curious how does SLA monitor on ASA work. As I understood and tested on GNS3, when configure SLA Monitor you have to specify outgoing interface and by that you are forcing packets (e.g. ICMP) out through specified interface (something th...
Dear Expert, I am deploying a cisco firepower and don't want to use mgt port. I want to use outside interface ip address to the sfr module. Is is possible?? Please suggest. Thanks....
I used "no http server enable" & also removed any configuration related to ASDM. I also removed all static nat statements. When I port scan my ASA public address I still see the ports open hours later. Goodyear# sh run: Saved:: Serial Number:...
Having an issue accessing web server from public internet. I set up some PAT rules & permitted the traffic in my outside acl. When I do a packet tracer it says my ASA is configured to allow access to the server from the outside which I include below....
I have One Firewall cluster (Two Firepower 4120) with port-channel configuration to Cisco Nexus 7K with VPC. There lots of drops on Firepower Port-channel2.86 interface and no drops on Cisco Nexus 7K VPC interface. Here is output of Port-channel2...
What could be the possible reason for a SYN Timeout when an ACL rule is set for that specific traffic? I am thinking that something on the remote side is causing the handshake to not complete. But could there be any other possibilites that would caus...
Hi Everyone, With reference to the Subject mentioned has been chasing by Cisco TAC team also. Is anyone have idea about the issue described below. FTD Box 2120 managing locally by FDM. All are running good, but unexpectedly FDM Management Inter...
Is there a way to NAT port 443 and 80? If so, how does it work if a user goes to http and https? thank you! LN
When the command "sho access-list" is performed, it allows the admin to see what hit counts have occured against each line within an Access-list statement. However it does not show a hit count with reference to object groups in the ACL.How can one di...
This may be an obvious answer - as in a bad idea - but is there no way to have the FMC/FPwr sensors generate an email alert when being portscanned? The policy is working and dropping traffic as it should, and has been - but I can't find the proper i...
I am running an ASA5506 with Firepower and FMC 6.2.2.2, and have a question about how rules interact. Please pardon me if this has been asked and answered. I searched through the posts but did not see an answer. My question is about inspecting the ...
After upgrading to 6.2.2.2-109 I received a warning that the application rule doesn't match any applications. The rule was set to match evasive/stealth tactics. When I check the rule, there's no tags or categories available. Was this removed ...
I want to make sure I'm not missing an alternative to managing FTD with FMC over IPSec.Currently my FTD installations at remote locations are anxiety-ridden. I'm fortunate in that I've been able to lab the FTD locally and deploy a config from our FMC...
