Network Security

Dear All,   I deployed ACP on my FTD devices but  still showing running since 1 day !. I don't know how to kill or delete it. below is the message Deployment - Policy and object collection complete. 23h 2m 40% Any idea please?

There is two things I am trying to Accomplish 1st is to ping my inside Interface from the outside subnet (So ping 192.168.44.1 from 172.24.100.0   2nd is to make ASDM work on either inside or outside interface. My network is just a home network. I pi...

Hello, I have just implemented Deep Packet SSL Inspection on our firewallI am finding instances of SSL certificate pinning (HPKP) where I need to make exceptions to the DPI list e.g. *.google.com etc. This fixes the problem.What I am finding strange ...

I just setup up AnyConnect on my ASA, when I type the WAN IP address on my remote PC, it does not connect.  I review the logs on the ASA and I can see where it is denied by the ACL. What in my config is wrong or preventing me from access the AnyConne...

Hi,  I am not able to ssh to a device behind a PIX firewall due to this error Apr 01 2017 16:25:07: %PIX-3-305005: No translation group found for tcp src outside:192.168.255.10/47080 dst inside.50:192.168.50.10/22 I don't get the error since the pack...

Hello, I was trying to upgrade our virtual FMC 5.4 to 6.2 using the documented path but had an error during upgrade to 6.0. We opened a TAC case and were advised to install some patches directly onto the FMC via SCP. I am trying to copy those files b...

Hello, I am using CISCO ASA 5585. While most of the sites are working fine, I am unable to browse one particular website. I captured the packets against the solution provided for "MSS Exceeded" but didn't find any packets captured against the match. ...

Hi,This is the topology. Internet ---- router ---- ASA FirePower ----- Fortigate --- LAN.The ASA FirePower is already blocking the following vulnerability.https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170310-struts2...

It's nice that the ASA supports policy-based routing now. I'm not sure it's capable of the main thing I want to use it for, though. On an IOS router, you can specify a policy for packets sourced from the device itself using ip local policy. Is there ...

I have event 2887 being generated in ADDS.  The general details is "During the previous 24 hour period, some clients attempted to perform LDAP binds that were either: 1 A SASL LDAP bind that did nt request signing or an LDAP simple bind that was perf...

I have a problem that when users or connections reach the user license limit, I disconnect one device to let another device connect to Internet. How can I make sure it works. Sometimes it's hard for a new device to connect successfully, or wait for s...