Network Security

hello  I am working on an ISE v2.7 to v3.2 upgrade /migration  I have staged a VM with a v3.2 build    I am trying to understand the timing of the handover for example if I restore the production configuration & install the certs  from v2.7 to the v3...

I have traffic flow like shown below -A Microsoft public IP > a public IP on our DMZ firewall on prem > NAT > an private IP on prem.Is it possible to configure FW to forward traffic as shown below?A Microsoft public IP > a public IP on our DMZ firewa...

Hello, community!I'm using FTD1010 managed by FDM with latest FW 7.4.2-172. I'm getting unexpected behavior with the box, that passes traffic however it should not do so.I configured 2 rules with logging:I configured SSL Decryption to match this traf...

I recently upgraded to 7.4.2.1 and learned about CSDAC and am happy this is being addressed.  Is it possible to apply these attributes to RAVPN split-tunneling?  This would be very useful over the existing Custom Attributes.

I have a problem with a URL list in the FMC. I have created a URL list object there. I have saved the URLs in a text document and uploaded them to the FMC. So far, all URLs that I have stored there work. I can also see in the unified events that the ...

ASA 5580，系统版本是8.4(1),现在配置failover时，inside的接口无法启用lacp协议，两端都是active，对端交换机配置port-channel，debug发现有lacpdu报文发送，但是在ASA这边没有收到，同时asa也没有发送报文，导致port-channel一直是down。网络拓扑如附件。现在是9.1连接cisco 7010交换机的10/5口作为port-channel接口，不知为什么，port-channel接口始终无法协商lacp成功，两端均为active，但...

We have 2 FMCv to manage different firewalls and we initially cloned the first FMC VM to create the new one, but that is not acceptable by the CSSM as I read on other threads.We then created a new FMCv from a downloaded image with the same version of...

Im attempting to use /api/fmc_config/v1/domain/{domainUUID}/object/internalcertificates/{objectId} to replace/rotate the LetsEncrypt certificate on the FMC.  I get a 200 response, but the certificate does not change.Has anyone successfully done this?...

Problem:  "show conn flow-rule qos" [followed by any input] gives "Syntax Error: Illegal parameter" Fix: first enter "system support diagnostic-cli" and then "enable", THEN you can run e.g. "show conn flow-rule qos 268444269" I first found the qos ru...

Cisco has announced that FirePower Management Center for Virtual Classic license (PAK License) SKUs are end-of-life and will be replaced by Smart license SKUs. Last possible end date when ordering or renewing SWSS for the affected SKUs is April 30, 2...

Issue Description: %ASA-6-611102: User authentication failed: IP address: 172.x.x.x, Uname: ***** Username hidden for a syslog message 611102 even though no logging hide username is configured.   Environment: ASA5516X Version 9.16.4.57   It looks lik...

Good dayI have sent up Anyconnect remote access vpns which are being authenticated through an AD for Duo MFA. Previously using local AAA, would lock users to a specific group. How can I achieve the same when the users are now connecting from AD. Rega...