Network Security

Dears, We have a deployment in which we have FMC version 6.2 manages 8000 series Firepower devices. We applied SSL policy to decrypt traffic for a specific Domain , say "*.mozilla.org" for example. We first tried and created a self-signed certificate...

Hello,i was wondering, how NGFW manages inline SSL decryption. I am interested in handshake communication. Does anyone know how it works? When NGFW determines DN, URL to match decryption rules? When NGFW enters the communication and injects its certi...

The fact that we need to always inquire as to what the real throughput of a firewall is when you turn on all inspections is getting old. Why can't vendors just provide the numbers up front? If they are not proud of the numbers, make it better. We jus...

Cisco ASA 5510 running Version 8.0(5) Two routers on separate ports. One works as it should, the other is being finicky for a completely unknown reason. ping PORT1 8.8.8.8 Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds: !!!!! Success...

Is there a way to change the timeout settings on a port on the Cisco ASA 5585?  For example port 443, can I change the timeout to 150 minutes?  Also is the default timeout 30 minutes for a port in the Cisco ASA?

Hello, I am just curious to know why did cisco move from CX module to SFR module? As far as I know, Sourcefire has been know for it's strong IPS features and SNORT technology. CX module is capable of doing NGFW services. What makes SFR a better solut...

We have a Sensor (ASA with firepower) that is on a slow link, and we are trying to push an update to it - but it always fails after exactly 60 minutes. As far as we can tell, firepower management simply gives up after 60 minutes, even though the devi...

Hello, I want to say that I am total beginner regarding FirePOWER After two days of Evaluation License  misunderstanding finally I am here to ask. These are the image which I deployed on my EXSi host: Cisco_Firepower_Management_Center_Virtual_VMware-...

I am looking to achieve the following - Internal Client with Internal address but Public DNS server. The default GW of Internal client is an ASA. Is there a way for the ASA to "Intercept" the DNS lookup of a certain FQDN (e.g Guest.company.com) which...

Hello, I have a 5.4.1.9 Virtual Defense Center that I'm trying to register some ASA firepower modules running 5.4.0 build 764 that keep failing to register. The DC and the sensor have the same shared key.  I can ping the sensor from the DC and I can ...

Hello, I want to connect to Microsoft Azure for RDS services from my corporate network via the Cisco ASA Firewall. My corporate network connects to a Cisco ASA 5585 device The Cisco ASA also has a Cisco Firepower Management Centre 750 installed I hav...

Hi all,  I'm hoping someone can  help me with a weird problem I have. I have three machines setup with TightVNC server listening on ports 5900, 5901 and 5902 with internal IP's of 192.168.0.100, .101 and .102 respectively. I have created both ACLs an...

I am looking to achieve the following and having a hard time with the various tests I have been doing. Internal client receives public DNS server address (let's say 8.8.8.8) via DHCP. I want any DNS queries (to 8.8.8.8) coming into the ASA Inside int...