Network Security

Hi,what are the common/global/prerequisite ACLs should apply in greenfield project for DC network? where FTD is perimeter device for DC. 

I have ASA5506-X running 9.16.4Gi1/1 will be used as  outside interfaceGi1/2 & Gi1/3 will be  member of bridge group 1.interface BVI1 will be used as inside interface.Does the following interface config looks ok?Do I need to configure security level ...

Hello, I have problems with Cisco ASA 5545.  We have two in cluster, and recently we RMA whole ASA, and put same SSD disks from removed one. After I put these commands: ASA#sw-module module sfr recover configure image disk0:/asa$ASA#sw-module module ...

We are attempting to use Cisco Umbrella for DLP policies for our organization. We backhaul branch traffic to our datacenter that is then sent to the umbrella cloud for inspection through VPN tunnels configured on our Firepower FTDs. We have AnyConnec...

Hello,I've been trying to perform a deployment on the FP1140.The deployment fails and requests a full deployment, which also keeps failing.The error occured when downgrading from Snort 3 to 2.The following log is from the command "pigtail deploy"  NG...

I'm often bitten by this issue:Scenario: When FTD firewalls are set to automatically download and install Vulnerability DataBase (VDB) updates and Vulnerability Research Team (VRT) updates on the firewall, sometimes they will fail to deploy, especial...

Hello,I have an issue that ISE 3.2 (with patch 4) unable to retrieve groups from Azure AD. The REST ID store test connection succeeded.  But when I retrieve the group, i got the error message "error processing this request, refer to logs for more det...

Have a pair of Firepower 2130 FTD's in HA, managed by Firepower Management Center. Is it possible to override the rp-mapping learned from the PIM bootstrap process with a static RP configuration?I'm able to do it on the IOS, IOS XE, and NX-OS devices...

I am trying to access the CLI for our FMC instance via vSphere and SSH. When entering the correct credentials the login banner is refreshed / asks for credentials again on vSphere and the Putty session just closes the window. If I enter the credentia...

All, Forgive the newbie here (when it comes to Cisco devices), but our company purchased several ASA5505 firewalls with bundled licenses.  My question is, how do I get these licenses?  I'm on the license page (http://www.Cisco.com/go/license) but fro...

Hello,I ran the following packet tracer using a destination on the Inside with private IP and I'm trying to understand what rule its specifically referencing when it say's the flow was dropped. firepower# packet-tracer input outSIDE udp 69.185.96.215...

hi,i need to add an additional VLAN in the FW "inside" interface to a switch. but currently the switch is configured to a single VLAN 30 and will need to configure as trunk.i only have IPsec VPN via internet to this remote site using VLAN 30 on the "...

Can someone confirm my understanding of HA in a multi-instance environment on the 3100 platform.Am i correct in the thinking that an Instance isn't shared across a HA group?Going by the HA setup GUI it would appear you need two instance one on each c...

Hi,pinging a VRF interface is not possible on FTD. Is this a feature?Pinging from VRF to somewhere works, but if you try to ping a VRF from outside, it's dropped by "implicit rule"? Phase: 5 Type: ACCESS-LIST Subtype: Result: DROP Elapsed time: 122 n...