Network Security

 I currently have an FTD that has public DNS configured on the management interface (>show network, >show DNS system have Umbrella IPs).  I have internal DNS IPs assigned to inside data interface using the platform policy.  I did not check enable DNS...

I have Cisco Firepower 4245 Firewall Active standby mode and Nexus 9k series on vPc pair , my connectivity like Firwall 1 porr1/1 to Nexussw1 port 1/3 and firewall2  port 1/1-to- nexussw2 - Port1/3.    And Firewall-1 port 1/2 is connected to Nexussw2...

We have a firewall that was purchased a few years back and we are trying to figure out if it is TAA compliant. The serial number of the unit is USE111NBQZ.

Hello, I have an ASA running on a FirePower2110 . I applied a config of another decommissioned ASA and, now, I can't log in. This is an old password that no one seems to remember. I've searched online for any information or Cisco documentation on how...

Hello everyone.I've encountered an architectural limitation in Cisco Firepower Threat Defense (FTD), which is managed via FMC, and I want to understand whether this is truly a platform limitation or whether I'm missing something.Scenario:I have an FT...

Greetings all. I have this little network I am working on and I have just came across an issue. The command I am trying to implement is"event manager applet BACKUP_CONFIG" . However, my issue stems from the fact that my other switches have taken this...

Hi, Please suggest migration tool, prerequisite and how effective it is in production environment.current : ASA5545new : FTD3210 (Locally managed or Cisco Security cloud control managed, both option i want to explore).also I want to know can we migra...

Hello, I see there is no way to "never shun" an IP address from the VPN Threat Detection feature on the newer ASA code. This needs to be added.  With CGNAT being common ISP practice, we need to be able to tell the ASA to never shun a certain IP addre...

I am getting below error in my vFMC, my vFMC is on 7.6.4. What could be the possible cause for this problem as earlier it was not there and it was updating automatically.Lightweight Security Package (LSP) Installlsp rel 20260126 2044Install Failed at...

Does anyone else have the problem of a Standby FTD throwing interface alerts for "Interface 'Port-channel<#.VLAN>' is not receiving any packets" in FMC monitor/alerts? ...it's a Standby FTD, in HA mode, so networking is suspended until it becomes act...

I have a High-Availability configured for 3110 FTD and I want to test the connectivity to the internet and my DMZ network without switching the role of the FTDs as this would require the downtime and I am not sure if the switching team has correctly ...

I have 2 internet link of 1 Gig, On FTD I am using a 10 Gig link and created sub-interfaces for both the internet links. I have configured ECMP for load-sharing but as I can see the utilization of the links is not happening equally. Sometimes link 1 ...