Good afternoon, We are planning to move a FMC pair which are hosted across two datacentres, to two new datacentres. We have to change the IP address of the FMCs which manage a number of FTD pairs. My plan is: From the primary FMC (FMC1) GUI go to S...
Forum Posts
Is there any security benefit by putting in specific deny's for say known bad hostsin a firewall rule base when the rule base has an implicit deny all in it?
HejI have enabled the interface on FMC and saved the configBut if I check the CLI on the fw, it still looks shutdown. Am I missing something?> show running-config interface Ethernet 1/12!interface Ethernet1/12shutdownno nameifno security-levelno ip a...
Hi there,Does allocating an IP to diagnostic interface would cause traffic to the firewall drop completely?Just learnt this by the hard way. Diagnostic interface is enabled by default so I just added an IP, same range as the management interface as i...
Hi everyone, I'm setting up a Firepower (FDM on box) running version 7 as part of a lab environment to prepare for some network changes in our production environment to try to avoid getting stuck late during implementation. I was trying to create a s...
Resolved! Network security presentation topics?
Hi everyone,I’m a new cybersecurity analyst, and I’ve been tasked with creating a presentation on network security. The main focus is on configuration, setup, best practices, or technologies expected to emerge in 2024. relevant topics in CCNA may als...
We launched Cisco ASA instance from AWS marketplace asav9-14-1-10-ENA-87868dac-850c-4c36-ba33-ff3d39a724ac-ami-0c0a65e104f6b08a8.4 (ami-0ad85ff80bee59491)https://aws.amazon.com/marketplace/pp/B00WH2LGM0?ref=cns_srchrowOur users are using it for devel...
Hi team,FMCv 7.4.1 and FPR2140 running 7.2.7 We are seeing an issue with BGP failing on FTD 2140 with AWS.Not established exactly when this has started, potentially since when we upgraded the FTD about 9 days ago.Only one of the peers is down and ot...
Is it possible to configure any type of email alert from a FTD 4145 to notify if the BGP peer link goes down? Thx in advance.
I saw routers and firewalll having options to block cookie and java.But is blocking java equal blocking javascript?bank web using javascript and cookie.but these options exist, which kind of situation that will use these option and still can use inte...
I am using Prometheus SNMP to get info from my Cisco ASA 5585 clusters. However, I was unable to find any MIB/OID containing information about last failover - neither time nor a reason. Pretty simple information that exists in CLI. Could someone, ple...
Resolved! Port 3306 shows open on a ASA 5525X
Hello I want help on a case that our ASA firewall is being scanned on a management interface and it shows that port 3306 is open and our QSA told us to verify it or close. Normally we use only ssh to access the firewall. So, please assist us why thi...
Hi, hoping to get some feedback around best practice on certificate validity periods for EAP-TLS certficates for 802.1x clients.Thoughts around setting expiry for over 2 years etc.
Hello all, we are in the process of having a separate network for physical security devices add. This supports cameras and door sensors etc… We don’t want to put this on the same production network and we don’t wish to manage this ourselves.The idea ...
