Network Security

We are looking to do the decrypt/resign for outbound SSL traffic and want the easiest way of getting the clients to trust the resigned certificate.  We do not have a PKI so that leaves us with getting a commercial certificate or using the Firepower b...

Hey, folks! We have physical FP and bunch of network segments in DMZ and lan. We'd like to use FP with virtual switch in inline mode. We need SSL decryption, AMP, URL and so on. Will it work correctly as on scheme in attachment ? We want to use sever...

I tried switching from a PIX 515-E to an ASA 5515-X over the weekend and while initially it seemed promising ultimately I had to go back to the PIX. For the sake of sanitization, we'll say that with my ISP I have the following IP address space assign...

Device:FirePower 7115 running version 6.0.1 (no malware license) In Host Attributes you can edit the operating system if the discovery gets it wrong. There are versions of OS that are not listed eg. newer versions of Juniper etc. What software update...

Hi, With the release of the 4100/9300 appliances with FTD image, does it make sense to skip the 5585-X SSP40 option and go with a 4120 appliance to be deployed in the Data Center, not the perimeter. I can see the following pros, - Better combined thr...

Hello Team,  I bought one Cisco ASA 5506 firewall. I tried to install. But i can't. How can install cisco asa 5506 firewall. What are the steps i need to do ?  I have the Product Authorization Key (PAK). How can i get the license for this product? I ...

Hello everyoneI have the ASA 5525-x with the CX module included, for web filtering. The version of ASA-CX is the 9.3.3.2 When setting the initial rules, all content https permit (social networks, etc.). I enabled Decryption the option to verify https...

Hello community, Still trying to figure it out the new NAT and today I came up with this real-life scenario and now I have some doubts on how the NAT behaves. My configuration: object network LOCAL-wNAT  host 10.34.30.36 nat (inside,outside) static 6...

Hi I am not sure what is happening here. Ok first my setup, i have Cisco ASA 5515X, ASA software version 9.5(1) ASDM software version 7.5(1)90. I have 2 new webservers on a dmz and i wish to forward incoming connections to them. The internal servers ...

I am trying (unsuccessfully) to scp a file from a unix/linux device to an ASA 5505. The connection is authenticated on the 5505 but the copy fails as it keeps reporting an "SCP send error" (see below). SCP is new to me as I normally use sftp, but tha...

Hi -  this may be a dumb question.  Ssh to firepower, is there a CLI command to save and backup current configuration? In firesight dc750, i know i can use GUI to save and restore firesight config but couldn't find a way to save and backup config in ...