Dears, I am configuring ASA 5525 with firepower (IPS) the box is out of the network before I put live I need to configure IPS in a professional way and to avoid any packets drops for the live network, can anybody guide me to configure IPS basic defa...
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(9) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(87) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(3) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,633) -
Cisco Bugs
(58) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(149) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,163) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Device Management (FDM)
(47) -
Cisco Secure Firewall Management Center (FMC)
(252) -
Cisco Secure Firewall Threat Defense (FTD)
(303) -
Cisco Security Cloud Control
(16) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(19) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(46) -
Cloud
(1) -
Cloud Provisioning
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(15) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(265) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(37) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(4) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,581) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
IPv6 Configuration
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(324) -
MPLS
(1) -
Multicloud Defense
(3) -
Network Management
(94) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,594) -
NGIPS
(1,874) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(2) -
Other Network Security Topics
(10,792) -
Other Networking
(9) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(12) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(21) -
Policy and Access
(2) -
Prioritization
(3) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(9) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(4) -
Security Management
(645) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(5) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Threat Grid
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(28) -
VPN and AnyConnect
(1) -
Vulnerability Management
(46) -
WAN
(8) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(4) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
Hello experts, while configuring some ASA Firewalls for IPv6 dual-stack i've noticed that 9.1(7) doesn't have anymore the option "match header destination-option" (under Policy-map type inspect ipv6) available. Not sure why... also not able to find a...
Hi there people. I have an ASA 5510 firewall with a secure license plus. It worked like a charm untill i updated to the recent update. And now when i try to connect the to vpn the client says User not authorized for Anyconnect Client access, contact ...
I would like to know what exactly are these firepower services that come with ASA5508-K9
I'm getting this error continuously on my firesight management center. However I can not think of why is it always generating this error. could it be that it is looking up a private URL and not being able to get any reputation for it ? Hope someone c...
Is there any way to drill into a Security Intelligence Event in Sourcefire? I am seeing numerous outbound CnC events coming from a host but cannot see what application, service, etc. is causing the triggered event. Thanks!! Scot Lymer
Hello, I am using Sourcefire Linux OS (virtual) 5.4.0 (build 126). I wonder how I can find out the available recommended/required updates/patches for this. I logged in below link https://software.cisco.com/download/navigator.html?emailclick=CNSemai...
Hi We have a customer that wishes to upgrade a HA pair of ASA5520's in Active standby mode from 8.4.7(30) and a HA pair ASA5585-X (I believe as the current code has the smp designation in the image file) in context mode from 9.1.(2) to the latest cod...
Resolved! Discontiguous IP NAT Pool
I have a discontiguous IP NAT Pool because the IT guy before me gave the FTP server and the KVM random external IP Addresses. How can I create a network object for this discontiguous range which is: 50.204.209.81 - 50.204.209.83 /28 50.204.209.85 - 5...
Hi all, I use port-security mac-address with violation shutdown. This is very usefull for all computers in a classroom. But I have Laptop authorized and this one is could plugin into another port of the same switch. So I could define this mac on anot...
Hello Folks! Is my first time that I´m configurin DMZ on ASA. I create a interface with security level 50, my outside is 0 and inside 100, All intefaces with diferent IP range. Based on security level the inside should be able to talk to dmz, but is ...
I configure a AD client to Cisco Firepower, bus it don't connect. Message error:
I have an old Cisco PIX that was configured with multiple site-to-site VPNs which were migrated to a new ASA last year. The same IP addresses, PSKs, etc. are still active on the new ASA so config info stored on the PIX is still valid. I would like ...
Resolved! TIME BASED ACL ON FIRESIGHT MANAGER
Dear All, we are using Cisco Firepower Management Center for VMWare. In which we have created several rules under Policies -->Access control. But we want to run some rules under defined time interval. Can anyone please help on this how to configure. ...
All, I have been attempting to identify which FireSight/Sourcefire rule(s) cover a particular CVE identifier. The CVE information is often found within a particular rule, but I have not been able to discover any way within the Defense Center to sear...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2026 06:39 AM | ||
| 07-15-2026 08:48 AM | ||
| 07-13-2026 11:05 AM | ||
| 06-24-2026 08:00 AM | ||
| 05-26-2026 07:54 AM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 |
