Network Security

hola buenas tardes, quisiera tener su ayuda en la solucion de un problema que tengo, tengo un Router que me entrego un ISP con dos segmentos de ips publicas, 186.67.68.xx este corresponde a la vlan 2 y el segmento 186.67.170.xx este corresponde a la ...

Hi, ASA FirePOWER Reporting on ASDM keeps loading forever. Thanks

Hello, I updated my ASA 5512 to ASA 9.8(1), ASDM 7.8(1). I'm unable to edit site to site connection profiles. I can enter information in the "Basic" section, but I can't enter "Advanced -> Crypto Map Entry" and "Tunnel Group". The form just doesn't ...

Dears, We have a deployment in which we have FMC version 6.2 manages 8000 series Firepower devices. We applied SSL policy to decrypt traffic for a specific Domain , say "*.mozilla.org" for example. We first tried and created a self-signed certifica...

Hello,i was wondering, how NGFW manages inline SSL decryption. I am interested in handshake communication. Does anyone know how it works? When NGFW determines DN, URL to match decryption rules? When NGFW enters the communication and injects its certi...

The fact that we need to always inquire as to what the real throughput of a firewall is when you turn on all inspections is getting old. Why can't vendors just provide the numbers up front? If they are not proud of the numbers, make it better. We jus...

Cisco ASA 5510 running Version 8.0(5) Two routers on separate ports. One works as it should, the other is being finicky for a completely unknown reason. ping PORT1 8.8.8.8 Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds: !!!!! Succes...

Is there a way to change the timeout settings on a port on the Cisco ASA 5585?  For example port 443, can I change the timeout to 150 minutes?  Also is the default timeout 30 minutes for a port in the Cisco ASA?

Hello, I am just curious to know why did cisco move from CX module to SFR module? As far as I know, Sourcefire has been know for it's strong IPS features and SNORT technology. CX module is capable of doing NGFW services. What makes SFR a better solut...

We have a Sensor (ASA with firepower) that is on a slow link, and we are trying to push an update to it - but it always fails after exactly 60 minutes. As far as we can tell, firepower management simply gives up after 60 minutes, even though the dev...

Hello, I want to say that I am total beginner regarding FirePOWER :) After two days of Evaluation License  misunderstanding finally I am here to ask. These are the image which I deployed on my EXSi host: Cisco_Firepower_Management_Center_Virtual_...

I am looking to achieve the following - Internal Client with Internal address but Public DNS server. The default GW of Internal client is an ASA. Is there a way for the ASA to "Intercept" the DNS lookup of a certain FQDN (e.g Guest.company.com) whic...