Network Security

Hi, We have a ASA5508 with Sourcefire FTD license .Can we use the box also as proxy or we need separate license for proxy functionality. Regards Kaushik

Hi, with the launch of the new FP2100 family, it states that it has FDM for on box mgmt, is this a full fledged mgmt platform , i.e. if I use it I don't need to use FMC at all, or is it just a cut down version like the ASA5500X on box mgmt for basi...

Hi,Do we have any Performance Data / Scale numbers on the NGFW platforms 4100, 9300 series w.r.t. what is the number of ACL scale on the appliance, CPU utilisation, features supported/tested etc.?

Hi, Were looking to rate limit traffic on our SFR by application such as SharePoint Cloud.  The release notes of SFR 6.1 state that it can do it as of this release but I cant find any documentation on how? We've installed 6.1 and its up and running b...

 I have 2 prev gen ASA 5505's connecting IPSEC IKE1 tunnels back to a single corporate ASA 5520. I am replacing the spoke site ASA 5505 with 5508-X and the Hub site 5520 to 5545-x. The  Esxi Virtual FMC will be located behind the Hub sites ASA 5545-x...

I need ideas on how to accomplish the above scenario. I have the ISR 2911 connected to the ISP router.  The ASA firewall would sit between my LAN and 2911.  My questions are: 1. Is this the best way to connect the two devices in order for the ASA jus...

I'm using the default ASA config (inside is 192.168.1.1/24) and setup the FirePower module to use 192.168.1.2/24. Both the interface 2 and the MAN1/1 are in the same switch as is my management machine. I can ping the FirePower module from my PC and f...

Hey Guys I am planning to Migrate From IPS-4520 to Cisco FirePower 8350. Do we have any tools to migrate Or is there any right documentation to do that. Please do let me know.

Is there a way to see what country the firepower system thinks an IP is from? I get that I can create a rule and test whether the packet is allowed or denied - but I'd like more feedback from firepower regarding what country it believes the IP is fro...

hello everyone, i have some problem for NAT Hairpinning. so, i have some simple topology on the bellow. i want to ping NAT IP Public (12.13.14.15) from host (10.11.12.13) on the inside interface, but still not working Host10.11.12.13/24 -----------...

Hello, I just want to say that I'm more on the Microsoft side. Working with a client, we setup a Site to Site VPN from Azure to their on-prem, and it's working. The Cisco networking individual provided some concerns/risks for running production loa...

I have an ASA 5505 on a job. It is a smaller business that would have done better with an RV082, but they have what they have. It is running firmware 8.4. The client needed ports forwarded for their FTP server. The port range in this config is tcp 43...