Network Security

Hi, I am working on AD migration and there will be a period where 2 different domains have to co-exist. Can FMC managed 2 ADs and in policies contains AD Security Groups from both domains? Thank you. RehardsMeng

Hi, I am planning the remote desktop through the Internet.I am considering the "SSL VPN Phone" vs "Cisco ASA UC Proxy" vs "MRA"I want to propose the MRA phone, but the users complained need enter the AD login on MRA phone.Can we set the cert. auth.? ...

Greetings,   We are having the following problem with our implementation of the Cisco Firepower integration with Active Directory and need Cisco’s help for this issue. Our customer is based in LATAM and using an Active Directory (AD) that is in Spani...

Mike here.  I'm a (very) junior engineer and I've been asked to configure a failover solution for our ASAs.    A more experienced engineer recommended the attached design (or at least my novice interpretation of it.) I appreciate any and all input. ...

Hi there, I would like to migrate ASA5525-X v9.2 Failover pair (ssd but no firepower) direct to FTD image (v6.2+) & utilise smart licensing.Its under partner maintenance & PICA software access. I have created a smart account for our company.  Are the...

Hi, I was trying to create split tunnel acl  using asdm. when adding ace  (eg: 192.168.5.10) asdm giving me an error "address cannot contain 192.168.5.10)  I have a static nat to the  192.168.5.10 .  asa version 9.4.2 Thanks

Hi All, While testing an application, we found that the session between the our virtual IP, and the backend server,  is established over the firewall, and disconnected immediately. So the connection log shows "duration 0:00:00 bytes 0 TCP FINs" (att...

Правильно ли я понимаю   embryonic-conn-max – это общее ограничение на полуоткрытые сессии. Не на конкретный хост, а на все которые у нас есть.. т.е. если у нас 500 сайтов работающих по 80 порту, то 10000 делиться на все 500 сайтов. Так?   per-client...

Hi There. Is there any chance I can get when was instaled the Licensing on a IPS 5525  on CLI?, Im looking for an answer and I got this form IME: But it is not clear for me . I´ll continue in my search Thanks in advance

Site A has a very large IP block (otherwise we would have used 1:1 NAT)Site B has 20 hostsSite A primarily initiates traffic to Site B; any host at site A is allowed to connectSite A has 2 network links in to Site B It will route traffic through Link...

Hello, I'd like to know if it is possible to configure a cluster with asymetric topology. for example let's say I have nodeA in Datacenter A and nodeB ind Datacenter B. Both nodes are connected to the same local LANs, but nodeA ge0/0 is connected to...