Network Security

I have a Firepower running in an ASA which is identifying files as malware but the file is still downloaded and I find it on the local drive of the PC.  I have attached snippets of the logs and the file rule.  Am I missing anything? Thanks, Diego

Does anybody know if there is a way to create a global suppression for an intrusion policy for a specific subnet instead of having to create the suppression for each rule?

Hi all, I am having trouble monitoring a port-channel for failover. The devices in question are ASA 5515 HA Pair connected to a stacked WS-C3850-48T stack I also have a 5525 HA Pair connected to a stacked WS-C3750X-48T- stack With the port channel ...

I recently upgraded my Cisco ASA 5585 from ASA 9.1(4) to 9.6(3)1 ASDM 7.1(5) to 7.6.2(150) Once I did that there have been some packets dropped on some of the interface traffic.  this traffic is on port channels is upgrading the software and firmwar...

Hi There, There is an issue in reaching ISE server. while tracing the IP , found the node is down and then ISE is struck in Boot mode. is this error because of server do not have loading image? or image is not loaded from right path(local disk/LUN/C...

So we have an application that uses a floating IP, think of HSRP.  The IP stays with a certain server but if it has issues for some reason, it floats over to the other server.  When this happens my ASA see's this as an arp collision. <188>Jun 07 201...

We have a redundant pair of ASA 5506-x firewalls with FTD image installed and managed with Firepower Management Center. Is there a way that I can transfer the configuration from the 5506 to the 2110? We used to be able to take the CLI and modify it a...

Hi, I need one suggestion from you guys/girls. I have firewall which was set by me one month ago. So it was quick and simple config without complicating things. One WAN address, two lan (one primary, and one extra). access lists to allow inside -> ou...

Hello, I was asked by bu sines to calculate estimate price for 2 Firepower TD NGFW (HA) and 1 Firepower MC with FW+IPS+Malware+App visibility Can somebody gives me an idea how to calculate price without contacting any third party companies. I need ...

Hi All, I would like know the correct way to configure access polices that can block HTTPS URL. This is a stand alone ASA unit where it is not joining any FMC. But i don't see SSL policies on the FTD, wonder how stand alone FTD can decrypt, re-sign o...