Network Security

I am trying to run TFD 6.1 in our lab enviroment to test it - I installed Firepower NGFW Virtual v6.1.0 on ESXi 5.1 or 5.5 image to our ESXi 5.5 - I tryed to deploy both versions either VI or ESXi - but I am not able to setup management IP address. I...

Hi All, I think i am loosing my mind on this one, as again i have found a configuration that works in a version before thats not working on 9.6. I have a static PAT to open port 10022 to an internal host. :- interface GigabitEthernet1/2  nameif DXBLV...

Feedback for new version: When editing IPS rules via Firepower management center and you want to suppress an IPS rule for a IP or Subnet we think it's better also have the opportunity to chose an existing Object-Group of IP addresses. For example: Pr...

Hi, I am wondering if I can configure the ASA to perform identity check with Cisco ISE instead of using the Cisco CDA.  If any have done this, please direct me to the right documentation.  Also, I am wondering if Cisco giving up on the CDA, since the...

hi all. bought 5506x firewall for home lab to learn how to get most out of this kit. i am at the moment initial stage how to use this firewall. everything is setup but i have not activicate the lic yet. as my understanding is i shall get a trail lic ...

Hi, Suppose that I configure the follow, the IPS function will audit and act only based on traffic redirect for module as configured? class-map SFR match access-list SFR policy-map global_policy class SFR sfr fail-open access-list SFR extended permit...

I was wondering if FTDv is supported in Microsoft Azure?

Hi, I am working on an access list and I have created an object group for IP addresses and an object group for Service. The access list require TCP and UDP ports open. I could write an access list seprate for tcp and upd for example access-list acl-i...

We are running Firepower 6.0 on the FireSight and a 7000 series sensor. HTTP traffic which the IPS sensor is inspecting is coming via a web proxy which has the X-Forwarder-For enabled on it. I have checked this by running a capture on the sensor and ...

Hi, I need to permit traffic from the inside to the outside interface for three specific hosts. Those hosts must be Natted with a specific public IP address. In your opinion the configuration below could work correctly? access-list Direttore_Generale...

I do not know why my cisco router had such kind of log. I google for help and someone said it is because of the Bonjour service of Apple. I don't know the exact reason. Can you help me?

Hi, I have an issue with my ASA FW is not working for dhcprelay. I try to configure just for a basic or simple network setup but it's failed,my client cannot get the ip from server. DHCP server --> ASA Firewall --> Switch --> Client #Server Ip - 202....

hi all, sorry i feel like a noob again. it's been a while since i designed/configured from scratch. a client wants to use an 'outside' interface on an ASA5516-X other than g0/0. is it possible to use g0/1 or other ports as outside interface? i rememb...