Network Security

I’m wondering if anyone can help me better understand the default NAT behavior on ASAs running 9.2 codes (specifically 9.2(4)10 in this case).I’m in the process of re-writing the config on an ASA that’s in transparent mode, going to routed mode. So I...

Anyone out there have the new Firepower 4100 NGFW. If so, in the firepower chassis manager are you using LDAP/Radius for authentication? I have LDAP/Radius working, but I only have read-only access after i connect to the chassis manager. Any help you...

Hi, We recently purchased Cisco ASA 5506 with FirePOWER and Control license. I tried to integrate the FirePOWER module with AD using LDAP Connections so that I can have some insight into users' information. I read somewhere that in order to get User ...

I'm trying to get two security contexts to use the same interface as described in the configuration guide "Config Guide" The implementation I have is following the shared interface scenario using "mac addresses" as the classifier. I have implemented ...

I was curious if there was a way to narrow down the dashboards to specific devices or specific group of devices. Currently we are getting ALL the data in one place in firesight but I want to create specific tabs for specific locations where we have F...

We are looking to do the decrypt/resign for outbound SSL traffic and want the easiest way of getting the clients to trust the resigned certificate.  We do not have a PKI so that leaves us with getting a commercial certificate or using the Firepower b...

Hey, folks! We have physical FP and bunch of network segments in DMZ and lan. We'd like to use FP with virtual switch in inline mode. We need SSL decryption, AMP, URL and so on. Will it work correctly as on scheme in attachment ? We want to use sever...

I tried switching from a PIX 515-E to an ASA 5515-X over the weekend and while initially it seemed promising ultimately I had to go back to the PIX. For the sake of sanitization, we'll say that with my ISP I have the following IP address space assign...

Device:FirePower 7115 running version 6.0.1 (no malware license) In Host Attributes you can edit the operating system if the discovery gets it wrong. There are versions of OS that are not listed eg. newer versions of Juniper etc. What software update...

Hi, With the release of the 4100/9300 appliances with FTD image, does it make sense to skip the 5585-X SSP40 option and go with a 4120 appliance to be deployed in the Data Center, not the perimeter. I can see the following pros, - Better combined thr...

Hello Team,  I bought one Cisco ASA 5506 firewall. I tried to install. But i can't. How can install cisco asa 5506 firewall. What are the steps i need to do ?  I have the Product Authorization Key (PAK). How can i get the license for this product? I ...

Hello everyoneI have the ASA 5525-x with the CX module included, for web filtering. The version of ASA-CX is the 9.3.3.2 When setting the initial rules, all content https permit (social networks, etc.). I enabled Decryption the option to verify https...