Network Security

We currently have Cisco/SourceFire 8250 IPS appliances in line on our inside and DMZ firewall interfaces.  Some of the firewalls are being periodically overwhelmed by bursty traffic, so ethernet flow control has been enabled, which seems to address t...

Hello everyone As the title suggest, I am currently playing around with the SFR module on my 5506-X. I think I set everything up corretly for everything is working so far. All software is updated to the latest releases. Now to the problem or rather ...

Hello, I have confusing now what should be correct order of data inspection under firepower.  With reference to information: http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Access_Control_Rules....

Hello , I have a small question here, although I was trying to find it over KB provided by Cisco on the internet I was not getting clear information on the following  If the ASA 5545 can understand the vlan tagged traffic coming from nexus 5548 swit...

Every guide on IPS configuration I've seen suggests that I use the web interface and implies that it should be up and running after initial setup. I can access a new 4345 IPS by ssh, but I have no success accessing it by https://ip address. I've capt...

i need to know the below performance to ASA 5508-X Firepower :- 1) Compression2) Virtual contexts 3)SSL throughput  in Gbps 4)Maximum L4 connections per second 5)Maximum L7 connections per second 6)Concurrent connections    

I am trying to run TFD 6.1 in our lab enviroment to test it - I installed Firepower NGFW Virtual v6.1.0 on ESXi 5.1 or 5.5 image to our ESXi 5.5 - I tryed to deploy both versions either VI or ESXi - but I am not able to setup management IP address. I...

Hi All, I think i am loosing my mind on this one, as again i have found a configuration that works in a version before thats not working on 9.6. I have a static PAT to open port 10022 to an internal host. :- interface GigabitEthernet1/2  nameif DXBL...

Feedback for new version: When editing IPS rules via Firepower management center and you want to suppress an IPS rule for a IP or Subnet we think it's better also have the opportunity to chose an existing Object-Group of IP addresses. For example: ...

Hi, I am wondering if I can configure the ASA to perform identity check with Cisco ISE instead of using the Cisco CDA.  If any have done this, please direct me to the right documentation.  Also, I am wondering if Cisco giving up on the CDA, since the...

hi all. bought 5506x firewall for home lab to learn how to get most out of this kit. i am at the moment initial stage how to use this firewall. everything is setup but i have not activicate the lic yet. as my understanding is i shall get a trail lic ...

Hi, Suppose that I configure the follow, the IPS function will audit and act only based on traffic redirect for module as configured? class-map SFR match access-list SFR policy-map global_policy class SFR sfr fail-open access-list SFR extended pe...

I was wondering if FTDv is supported in Microsoft Azure?