Network Security

Hi, I have multiple specific SID's that I specifically want to disable across multiple intrusion policies on a Cisco Firepower device as part of a tuning process. Unfortunately when entering the SID's with a , deliminintaor into the filter from the r...

Hello,   Well I have this firewall Cisco ASA5516-X firepower with this default configuration:   timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 sctp 0:02:00 icmp 0:00:02timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:...

I have launched a vASA on AWS and I am able to connect to it via its mgmt interface.   Now I'd like to create an Inside and Outside interface. So I created 2 ENI's and attached them to the vASA instance via the AWS console but they wont show when a I...

I have been getting conflicting information on Cisco ASAV on AWS. We had subscribed to Cisco ASAV pay by the hour on AWS . When we hit an issue and tried to raise a ticket with Cisco, Cisco would not support it as there was no license contract associ...

Hi, i need to know if its possible to do a NAT Reflection configuration for an ASA FTD image.   i need it for an expressway deployment,   Thank you!

Hello, I got firepower management center virtual 6.0.1 , and asa with firepower services 5555-x 6.0.0.1. I have malware license. My question is - which device is submiting the unknown captured file to dynamic analysis (cisco sandbox in the cloud) and...

Just wondering if anyone else has experienced a lagging in their NGFW2100 or ASA5506-X firewalls.  We have one of each of these and a couple of weeks ago we noticed the network seeming to drop for a few seconds every few minutes.  If you click to go ...

i put ISE in DMZ zone in fortigate and Users in different Zone , i installed forti FSSO tool in active directory so it can send users with ip mapping to fortigate so i can apply policies based on username , and users are in different zone than ISE , ...

Hi , I am beginner to ASA device. I am having issue accessing Inside from low security level i.e. 80.  Below is config relating to those interfaces: interface Vlan200 nameif inside security-level 100 ip address 172.25.100.254 255.255.255.0 !interface...

Hi everyone, Firepower 2110 Threat Defense is in questionI need to set security-level to be 100 on some interface, but I cannot seem to find where to set that up. Nothing on the User interface, and I tried almost all commands in the command line. I e...

Can anyone please send me a link or links on how configuring "connection rate" and "stateful packet inspections rate" on an ASA?It seems not easy to find the linksthanks,Han

I have an Exchange server running on a LAN on the Inside Interface.  Recently a new build of GFI MailEssentials (running on the mail server) caused internet connectivity to fail on that server stopping email flow.  I can ping other machines on the LA...