Network Security

So I re-imaged an ASA 5506-X to a Firepower Threat Defence image 6.1 with the new FirePower Device Manager.  This is very appealing for small customer Internet connections without the need for running a separate Firepower Management Centre so I was k...

Hi, from the firesight management center, how do I find out which user and device has spent the most time looking at a particular application like YouTube for example and how much bandwidth they have consumed doing that. i have a customer asking for ...

Hi, I am working on AD migration and there will be a period where 2 different domains have to co-exist. Can FMC managed 2 ADs and in policies contains AD Security Groups from both domains? Thank you. RehardsMeng

Hi, I am planning the remote desktop through the Internet.I am considering the "SSL VPN Phone" vs "Cisco ASA UC Proxy" vs "MRA"I want to propose the MRA phone, but the users complained need enter the AD login on MRA phone.Can we set the cert. auth.? ...

Greetings,   We are having the following problem with our implementation of the Cisco Firepower integration with Active Directory and need Cisco’s help for this issue. Our customer is based in LATAM and using an Active Directory (AD) that is in Spani...

Mike here.  I'm a (very) junior engineer and I've been asked to configure a failover solution for our ASAs.    A more experienced engineer recommended the attached design (or at least my novice interpretation of it.) I appreciate any and all input.  ...

Hi there, I would like to migrate ASA5525-X v9.2 Failover pair (ssd but no firepower) direct to FTD image (v6.2+) & utilise smart licensing.Its under partner maintenance & PICA software access. I have created a smart account for our company.  Are the...

Hi, I was trying to create split tunnel acl  using asdm. when adding ace  (eg: 192.168.5.10) asdm giving me an error "address cannot contain 192.168.5.10)  I have a static nat to the  192.168.5.10 .  asa version 9.4.2 Thanks

Hi All, While testing an application, we found that the session between the our virtual IP, and the backend server,  is established over the firewall, and disconnected immediately. So the connection log shows "duration 0:00:00 bytes 0 TCP FINs" (atta...

Правильно ли я понимаю   embryonic-conn-max – это общее ограничение на полуоткрытые сессии. Не на конкретный хост, а на все которые у нас есть.. т.е. если у нас 500 сайтов работающих по 80 порту, то 10000 делиться на все 500 сайтов. Так?   per-client...

Hi There. Is there any chance I can get when was instaled the Licensing on a IPS 5525  on CLI?, Im looking for an answer and I got this form IME: But it is not clear for me . I´ll continue in my search Thanks in advance

Site A has a very large IP block (otherwise we would have used 1:1 NAT) Site B has 20 hosts Site A primarily initiates traffic to Site B; any host at site A is allowed to connect Site A has 2 network links in to Site B  It will route traffic through ...