Network Security

I am working on a new install including 2 - FPR4120 and Firepower Management Center (FMC) 6.0.1. I have the devices connected to the FMC and have one of the devices connected with monitor interfaces, so I see data populating my dashboard. Since this ...

Our company just implement a few ASA 5516-X with FirePower Services, obvious this users is playing games, but it seems that blocking URL games not works as the category is not goes to the correct group. It was sad that we are using Partner support an...

Hello It's my first post at the cisco community. So as you will see, i'm not very fluent in English. I have a couple of 5515 ASA (9.1(2) software) in active/passive failover. In the past, i have configured the traffic to be policed at 500 Mbs and it ...

I’m wondering if anyone can help me better understand the default NAT behavior on ASAs running 9.2 codes (specifically 9.2(4)10 in this case).I’m in the process of re-writing the config on an ASA that’s in transparent mode, going to routed mode. So I...

Anyone out there have the new Firepower 4100 NGFW. If so, in the firepower chassis manager are you using LDAP/Radius for authentication? I have LDAP/Radius working, but I only have read-only access after i connect to the chassis manager. Any help you...

Hi, We recently purchased Cisco ASA 5506 with FirePOWER and Control license. I tried to integrate the FirePOWER module with AD using LDAP Connections so that I can have some insight into users' information. I read somewhere that in order to get User ...

I'm trying to get two security contexts to use the same interface as described in the configuration guide "Config Guide" The implementation I have is following the shared interface scenario using "mac addresses" as the classifier. I have implemented ...

I was curious if there was a way to narrow down the dashboards to specific devices or specific group of devices. Currently we are getting ALL the data in one place in firesight but I want to create specific tabs for specific locations where we have F...

We are looking to do the decrypt/resign for outbound SSL traffic and want the easiest way of getting the clients to trust the resigned certificate.  We do not have a PKI so that leaves us with getting a commercial certificate or using the Firepower b...

Hey, folks! We have physical FP and bunch of network segments in DMZ and lan. We'd like to use FP with virtual switch in inline mode. We need SSL decryption, AMP, URL and so on. Will it work correctly as on scheme in attachment ? We want to use sever...

I tried switching from a PIX 515-E to an ASA 5515-X over the weekend and while initially it seemed promising ultimately I had to go back to the PIX. For the sake of sanitization, we'll say that with my ISP I have the following IP address space assign...

Device:FirePower 7115 running version 6.0.1 (no malware license) In Host Attributes you can edit the operating system if the discovery gets it wrong. There are versions of OS that are not listed eg. newer versions of Juniper etc. What software update...

Hi, With the release of the 4100/9300 appliances with FTD image, does it make sense to skip the 5585-X SSP40 option and go with a 4120 appliance to be deployed in the Data Center, not the perimeter. I can see the following pros, - Better combined thr...