Network Security

I am attempting to change our service policy to allow us to bypass firepower inspection for certain traffic like VOIP. However, Im a bit confused as to the effect running certain commands would have. Someone else set this up a long time ago with the ...

I am using the latest FTD migration tool to move contexts from our old ASA5585 to FMC without FTD.There is a major problem when doing this conversion as their is no way the tool can apply the destination zone i want and configured it to, it sets it t...

Hi all,See the below comment in a few of my policies.. is there something that needs addressing for each of the rules showing this comment? 

Hello Everyone, I am migrating from a ASA with SFR module to aFTD running ASA image and another FTD running inline sets. The plan is to replace ASA with FTD running ASA image and SFR with an FTD running inline sets. In the current ASA we have around ...

Good moorning everyone,I need tô config the 1122 with redundant interface because i need tô conect port 1 in one switch and port 3 em other switch and both ports need tô have the same subnet and also this interfaces need tô have some subinterfaces.My...

Hi,I have one single ASA with single public IP/Interface configured to establish l2l vpn tunnel to two different Frigates for the SAME Interesting traffic. it works fine if either of fortigates IP turns down but when both are up then ASA connects to ...

Hello, Very new to Cisco IOS devices and AAA configurations. We currently have a PKI infrastructure, and are using NPS for radius authentication/authorization.I've been tasked to change our baseline IOS configuration so that it can validate user pki ...

Please help to know if anyway to fix this observation or any workaround.  The remote SSH server is configured to allow key exchange algorithms which are considered weak.This is based on the IETF draft document Key Exchange (KEX) Method Updates and Re...

Hi All, Hoping someone can answer few questions around enabling WPA3 on Meraki. I work for a large enterprise and we are looking to enable WPA3 for all our offices. We use Meraki APs at all our offices and currently WPA2 is enabled and users authenti...

Hi, We have an FTD 3110 Active/Passive cluster with a requirement to group 30 network interfaces (sub-interfaces) into 3 zones, with traffic controls for both intra-zone and inter-zone traffic. For example, intra-zone traffic would involve traffic be...

Hi all, is there any detailed documentation for FMC REST API GET call /api/fmc_config/v1/domain/{domainUUID}/health/metrics which can get health statistics? The documentation mentions metric -- "name of the prometheus metric to be queried" however, t...