Network Security

Defense Center VM is deployed on ESXI 5.5. 4 CPUs, 8GBs memory. After uploading the 5.4.1.6 patch tried to install and it fails while attempting to run the following script: script 450_prior_updates/100_run_prior_dates didn't run I looked in the sysl...

i have my rules setup in a standard way where certain categories are allowed like news and media e.g. cnn and others like web advertisement and CDN are blocked. the problem i have is because websites like cnn.com make calls to URLs in the blocked ca...

Hi folks! After a few interactions with FirePOWER, Cisco TAC, Cisco LIve!  Lunch and Learn, and "The Hub" -  I find myself feeling like still searching for good documentation for a few "Best practices" that would apply to many scenarios. When I hav...

Hello to everybody, I have a question about the updates on Device managed and Defense Center. If I schedule the update of VDB, Snort Rules and Geolocation IP Address, on Primary Defense Center; I have to schedule in Secondary Defense Center too? Or ...

PAT Configuration - ASA5505 9.1(2) / ASDM 7.13Hi Guys,I been expending hours in this configuration that should be fairly easy but apparently is not. I been reading several post with different setups but without luck on my ends. What i am trying to ac...

Hi Guys, I am trying to inspect incoming SSL traffic in my FirePOWER as I have internal SSL web server.  Cert and Key are already imported through PKI object management and SSL policy is already created too. However, I am here a bit lost my way to f...

I use firepower v.5.4.1 on ASA 5516. I see huge amout of malware comming via mail (smtp connection). Almost every malware detection is only retrospective. It means malware reached customer mail servers and maybe users mail-boxes too. IP addresses of ...

Hey all, I have a server that is NATed from a private address to a public address (static 1:1), and while inbound traffic to it works, if it tries to browse the internet it cannot. Other things on the internal 10.x.12.x network can browse just fine,...

Dears, please find the attached, i am trying to configure DAP for users samsung smart phones what will be configured for Device Unique ID, i tried with imei number and also with serial number it doesn't work thanks

Hi all,     can you advice please how to configure HA for firepower FTD  BR Hazem Hafez

From ASDM, tried to reload the box, now, no file save. Details window says reload started, then stops "waiting for file save" to complete (which I told it NOT to do). It tore down my tunnel, and the ASDM will no longer connect. I can SSH to it, but n...