Network Security

Hi, I have fmc with license FS-VMW-2-SW-K9 , i need running 10 sensor inside fmc, if I bought the license FS-VMW-10-SW-K9 , the fmc will have available 12 sensor for manage? Another question, suppose that i have to manage 20 sensors, can I bought two...

Hi  is there anyone can help me to configure in cisco asa to allow social network in a spcefic time. Thanks in advance..

Hi, In our network we are going to newly deploy Cisco ASA 5508-x and 5518-x along with source fire. Where in all the sites the devices will have both Firewall + IPS functionality  and in some sites we had planned to configure VPN concentrator in the ...

I'm looking for config hints to get asdm access to an ASA without strong encyption license caused by export restrictions and e.g. current version of Firefox. How need I modify the ssl config on the ASA and the config in Firefox ? I tried a lot of thi...

can somebody please tell me this single command is enough for Nat limit what value should i set for conn max and embryonic conn max. set connection conn-max 600 embryonic-conn-max 50

Hello. One of our customers wants to change the management ip addres of a firepower management center (aka firesight). They are using this device to manage three other asa with firepower services. what would be the recommended procedure to doing this...

I have installed all Firepower licenses (L-ASA5506-TAMC-PR=, ASA5506-CTRL-LIC) through ASDM on ASA, created policies and everything works fine. Now I want to use Firepower management center as management tool for Firepower services. I have added devi...

All, Several of my FirePOWER sensors (7020 and 7030's running 5.3.0.8) are alerting for time sync.  The FireSIGHT is syncing fine with the assigned NTP server, but the FirePOWER sensors do not sync.  I have gone through this document Troubleshoot Iss...

Hi, We have a scenario with three ASA: one 5515-X with FirePOWER in the HQ, two 5505 in each branch, and IPsec VPN tunnels from both 5505 to the 5515-X. We are forwarding all the traffic from the branches to the VPN tunnels (vpn acl is from branch lo...

Hello,I need to get a file from a sensor but there are several firewalls in between FMC and Sensors and the only open port is 8305 (no ssh).  Could I use the sftunnel to transport that file from sensor to FMC?Has somebody face it before or has any id...

We have a requirement to disable IKE aggressive mode. We are running an ASA v7 and I know how to do this ("isakmp am-disable") but I'm not sure what impact it will have on our existing VPN set-up. We are using pre-shared keys.We have remote offices (...

We are seeing syslog events that indicate some data packets are being discarded due to having more fragments than the default value of 24 on the ASA. There is a global command that allows this to be changed to 1-8200. I wonder if increasing this valu...

Hi guys,We want to connect to physical interfaces from ASA to each Nexus core, so is there any possibility to assign same rule set to both interfaces simultaneously? (a kind of zone aggregation).Regards.Jesus