Network Security

If I were to implement SSL decryption, does Firepower essentially act as a man-in-the-middle allowing the module to see all traffic going to and from the private client and public server?  If this is the case, what is protecting the user from having ...

So quick and easy question "I hope". i have a asa configured on an internal network and I see that there's a static statement for each interface combination but it's just saying nat the ip to itself which seems to be pointless. Are these statements e...

The attacks blocked by IPS even shows internal IP addresses... Why is that so? Can some help me understand this?

Hi Team, Iam not able to locate documentation of the features as below in cisco NGFW 4110: Support of 10Gbps Multi-mode Fiber ports For this model, how the control panels work on each firewall when deployed in cluster? Does this model support Auto Fa...

Please help, seems like I need contract cisco should not make it like that. it was a bug fix for windows 10

Gents we have a ASA one port of ASA connects to another customer firewall with a dedicated link. The other port is connected to internal network. We have a server on internal network which needs to ping the customer firewall (which is connected to th...

When we integrate the Firepower / FMC with Active Directory, I know we can apply policies on a per-user and a per-group basis. Is it possible to apply policies on a Organization Unit (OU) basis? Thanks Ali Fahim

Hi, I'm trying to figure out how to log audit logs [System->Configuration-Audit log] and IPS policy alerts [Intrusion policy->Advanced->Syslog Alerting] to external syslog using non-standard syslog ports or more sysolog servers. Namely in audit logs ...

I am replacing some ASAs with FTD and one of the things that they had in place was WCCP redirection of traffic to a WebSense appliance for URL Filtering. Where can I make this configuration in FTD? Thanks

Hi Team, In one of the deployments we are getting health alerts as below: number of files detected in traffic exceeds the module threshold. is there any explanation for the same, is it a,concern to be addressed for the same? module version: 6.0.1 Tha...

Hi, I am hoping somebody can elaborate on the Transfer Packet feature/option when adding a device to the FMC. The Cisco document says this option is on by default and that it the FTD device sends packet data with the events to the Firepower Managemen...

Hi  We are installing a Firepower Module on ASA 5525-X and we will be managing it using Management Center Virtual. All the licenses are classical licenses and we have purchased a 3 Year IP Subscription L-ASA5525-TA-3Y. However, we did not get any PAK...