Network Security

hi.i have a strange problem.i have Redundant ASA5510 setup (active/passive)users have been using IPsec and SSL vpn for a long time without any problem.now some users want to be able to access bookmarks and company data through the Web portal.i have e...

Hi, I'm getting an error about expired certificate from FXOS: #show fault Major F0853 2018-06-02T13:06:08.798 126445 default Keyring's certificate is invalid, reason: expired.   If checking further: #scope security #show keyring default ... Signature...

hi,i have 2 private IP that would need to configure to a NAT pool of /29 public IP.can someone confirm if below config is correct?do i need to add the "flat" keyword to "PAT" using 1024-65535 dynamic ephemeral ports or this is automatic?will both pri...

can we make 3105 FTD firewall as proxy gateway?if yes, are there any articles? 

In the middle of updating a pair of FTD 1010's from 6.6.4 to 6.6.5, the upgrade failed due to the HA links going down for some reason during the upgrade.  We use a port channel for HA and it was all down.  When checking the CLI, I noticed that it sho...

Some VPN users received cert renewal emails from a couple of our ASAs, but I don't know why. I normally have the ASA send them manually as needed, but I didn't in this case. Only some users received the emails, not sure why that is either. Anyone hav...

What is mean when the asa failover because of set by the config command? I saw that when I do show failover history on the ASA.   Thank you.   vrian

I'm going to use a firepower 2140 as internet firewall. so i need to use bandwidth limitation through QOS. But it's not clear how it works. if i specified 1G for a subnet as a network condition in the QOS rule. every IP inside this subnet would get 1...

Currently got FMC 7.3.1 upgraded from 7.2.4 and im getting a Health Status warning saying Sybase Status - Test Failed.Have tried the following:pmtool restartbyid slapmtool restartby id TomcatHas anyone come across this issue and how to resolve?

Hi to all,i am trying to implement a site to site IPSec VPN between an FTD-HA pair and a cisco 2821.Till now i haven't succeeded in doing so , but before starting to dig dipper i would like to ask you if there are needed any special licenses for this...

I have Cisco C9200L-48P-4G with ISO 17.03.04b.I do have the below configurations.ip ssh server algorithm kex ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group14-sha1ip ssh client algorithm kex ecdh-sha2-nistp256 ecdh-sha2-...

I've just downloaded "Cisco_Secure_FW_Mgmt_Center_Virtual_VMware-7.2.0-82.tar.gz", however when I open it with WinRar I get an error and there is only the .vmdk file shown in the archive.  I've verified the SHA-512 hash and also tried WinZip and 7-Zi...