Network Security

Feedback for new version: When editing IPS rules via Firepower management center and you want to suppress an IPS rule for a IP or Subnet we think it's better also have the opportunity to chose an existing Object-Group of IP addresses. For example: ...

Hi, I am wondering if I can configure the ASA to perform identity check with Cisco ISE instead of using the Cisco CDA.  If any have done this, please direct me to the right documentation.  Also, I am wondering if Cisco giving up on the CDA, since the...

hi all. bought 5506x firewall for home lab to learn how to get most out of this kit. i am at the moment initial stage how to use this firewall. everything is setup but i have not activicate the lic yet. as my understanding is i shall get a trail lic ...

Hi, Suppose that I configure the follow, the IPS function will audit and act only based on traffic redirect for module as configured? class-map SFR match access-list SFR policy-map global_policy class SFR sfr fail-open access-list SFR extended pe...

I was wondering if FTDv is supported in Microsoft Azure?

Hi, I am working on an access list and I have created an object group for IP addresses and an object group for Service. The access list require TCP and UDP ports open. I could write an access list seprate for tcp and upd for example access-list acl-...

We are running Firepower 6.0 on the FireSight and a 7000 series sensor. HTTP traffic which the IPS sensor is inspecting is coming via a web proxy which has the X-Forwarder-For enabled on it. I have checked this by running a capture on the sensor and ...

Hi, I need to permit traffic from the inside to the outside interface for three specific hosts. Those hosts must be Natted with a specific public IP address. In your opinion the configuration below could work correctly? access-list Direttore_Gener...

I do not know why my cisco router had such kind of log. I google for help and someone said it is because of the Bonjour service of Apple. I don't know the exact reason. Can you help me?

Hi, I have an issue with my ASA FW is not working for dhcprelay. I try to configure just for a basic or simple network setup but it's failed,my client cannot get the ip from server. DHCP server --> ASA Firewall --> Switch --> Client #Server Ip - 20...

hi all, sorry i feel like a noob again. it's been a while since i designed/configured from scratch. a client wants to use an 'outside' interface on an ASA5516-X other than g0/0. is it possible to use g0/1 or other ports as outside interface? i rememb...

Hi, I have just inherited a site with a configuration issue that has left me perplexed as I cannot find the cause of the problem.  Any assistance with this will be greatly appreciated. When the C881-K9 is attached to the network to replace a small bu...

I am trying to block facebook website using fqdn, the problem I am facing is that it block all sites  Here is my configuration. Step 1 #dns domain-lookup outside #DNS server-group DefaultDNS #name-server 8.8.4.4 Step 2 #object network OBJ-FACEBOOK.CO...