Network Security

Hello, I have confusing now what should be correct order of data inspection under firepower.  With reference to information: http://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Access_Control_Rules....

Hello , I have a small question here, although I was trying to find it over KB provided by Cisco on the internet I was not getting clear information on the following  If the ASA 5545 can understand the vlan tagged traffic coming from nexus 5548 swit...

Every guide on IPS configuration I've seen suggests that I use the web interface and implies that it should be up and running after initial setup. I can access a new 4345 IPS by ssh, but I have no success accessing it by https://ip address. I've capt...

i need to know the below performance to ASA 5508-X Firepower :- 1) Compression2) Virtual contexts 3)SSL throughput  in Gbps 4)Maximum L4 connections per second 5)Maximum L7 connections per second 6)Concurrent connections    

I am trying to run TFD 6.1 in our lab enviroment to test it - I installed Firepower NGFW Virtual v6.1.0 on ESXi 5.1 or 5.5 image to our ESXi 5.5 - I tryed to deploy both versions either VI or ESXi - but I am not able to setup management IP address. I...

Hi All, I think i am loosing my mind on this one, as again i have found a configuration that works in a version before thats not working on 9.6. I have a static PAT to open port 10022 to an internal host. :- interface GigabitEthernet1/2  nameif DXBL...

Feedback for new version: When editing IPS rules via Firepower management center and you want to suppress an IPS rule for a IP or Subnet we think it's better also have the opportunity to chose an existing Object-Group of IP addresses. For example: ...

Hi, I am wondering if I can configure the ASA to perform identity check with Cisco ISE instead of using the Cisco CDA.  If any have done this, please direct me to the right documentation.  Also, I am wondering if Cisco giving up on the CDA, since the...

hi all. bought 5506x firewall for home lab to learn how to get most out of this kit. i am at the moment initial stage how to use this firewall. everything is setup but i have not activicate the lic yet. as my understanding is i shall get a trail lic ...

Hi, Suppose that I configure the follow, the IPS function will audit and act only based on traffic redirect for module as configured? class-map SFR match access-list SFR policy-map global_policy class SFR sfr fail-open access-list SFR extended pe...

I was wondering if FTDv is supported in Microsoft Azure?

Hi, I am working on an access list and I have created an object group for IP addresses and an object group for Service. The access list require TCP and UDP ports open. I could write an access list seprate for tcp and upd for example access-list acl-...

We are running Firepower 6.0 on the FireSight and a 7000 series sensor. HTTP traffic which the IPS sensor is inspecting is coming via a web proxy which has the X-Forwarder-For enabled on it. I have checked this by running a capture on the sensor and ...