Network Security

Hello, We are running FMC 7.2 and on the summery dashboard on the Threats TAB, there is a list called  "Indication of Compromise by Host" where we can see hosts that have downloaded malware and are CnC connected. It looks like this: We would like to ...

Hi,I have a Cisco ASAv FPR-1010.  The unit is running cisco-asa-fp1k.9.18.4.SPA and I want to downgrade it to cisco-asa-fp1k.9.16.4.SPA.  I've copied the 9.16 package onto the disk of the ASA fine okay.  In this setup (appliance mode) i am finding th...

Hi Guys, Please help, I am trying to boot up FPR 2130 but I am failing. I tried also to re-image the appliance but still the same issue. rommon 9 > boot disk1:/cisco-ftd-fp2k.7.2.8-25.SPALocated 'cisco-ftd-fp2k.7.2.8-25.SPA' @ cluster 614590.will try...

I'm preparing to deploy a Firepower 1120 to a remote location and I'm hoping to have it as close to "plug and go" as possible.  I've read (and am still reading) available documentation for adding a new FTD to our FMC, and I'm aware of at least these ...

Is it possible to use FMC to create a custom group of URL categories?  For instance, I would like to create a group of URL categories called "Not Suitable for MyCorp" and then add say Adult, Gaming, Drugs and Violence.  I realize I can just add these...

I am trying to send the FMC logs to Elastic SIEM and need some help determining whats the best method, estreamer of syslog?Can you direct me to any documentation. Thank you

We have multiple operating companies with one overall holding company.    We have an FMC with our AD connected as a realm with no issues.   Some of the other operating companies need access to some of our services, there is a internal network connect...

Hi,Is it possible to export CDO logs to Microsoft Sentinel via syslog or API?Thanks,  

I am getting tons of attempts trying to access our ldap server on the inside network. The private IP is not accessible from the internet. Are they hammering on the webvpn interface?  How do I block these?  

Is there a way to fail over from ASA Multi-Context 1 to 2? For example, the customer has only one ASA. The Peer Device for Site-to-Site VPN connected to Multi-Context 1 is down. In this case, can VPN service be provided by Multi-Context 2 instead?

Hi,  I'm trying to connect the Estreamer with OMSagent, so i can send log to Sentinel, but i'm receiving this error. Process Process-1:Traceback (most recent call last):File "/home/suporte/fp-05-microsoft-sentinel-connector/estreamer/baseproc.py", li...

Hi,I've been monitoring the situation for a while and noticed that about a week ago we received a notification:Aug 28 11:38:37 _gateway %FTD-2-321006: message repeated 3 times: [System Memory usage reached 83%]The system memory usage has now increase...