Network Security

I have the latest FTD running which is 7.7.0 on Firepower 1010.  From the web interface i open a CLI popup window.  I used to be able to just enter "show environment" and it would show me the temp but now it just says command execution failed.  It ha...

I have a mixed network with several brands of switches and routers including primarily Cisco.  Can Cybervision be configured to work with all of them?  They are all managed switches with LLDP/SNMP.

Hi,I have two RADIUS servers configured for Remote VPN access. For testing pursposes, I disconnected one of the servers to ensure that the RADIUS requests where correctly managed by the other RADIUS server. After testing this scenario successfully, I...

Hello Team,I have topology as attached, I have introduced another interface on the ftd [172.16.40.25] . this is where have configured the new tunnel to the branch site. on the asa have natted 41.206.58.2> 172.16.40.25 on 4500/500 services. i then us...

Annoying because this bug is preventing me from upgrading my FTDs that also have a known bug, because FMC needs to be upgraded first. Opened a case with TAC as I don't fully feel comfortable disabling Database and EO Integrity Check in FMC health pol...

I have seen nothing but obscure random routing issues on this gold star release: -Default route completely dropping until devices are rebooted (believed to be related to an undocumented IP SLA bug) -dynamic routing no longer working (even though rout...

hi,I need to NAT one subnet to another from inside to outside, but also to NAT DNS replies for some of the hosts in original subnet. Set of host that needs to be dns_replies_nated is dynamic. Is this possible? br

We have a requirement for managing a FTD from FMC trough internet, since our corporate network is bit slow for management purposes.My Setup is like below, our FMC is in one HQ-DC and it doesn't have any NAT to communicate or to be accessed from inter...

Hi,We have FMC 7.4.2.1-30 and Firepower 1120/1150 with the same release. Every morning the FMC wants to deploy the following changes on all firewalls, although nothing has been edited on the FMC during the night:dns server-group DNS_Intranet no doma...

SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) in cisco Catalyst 9300 We have run vulnerability cisco Catalyst 9300  and we find the above  vulnerability. All software is up to date.#show ip sshSSH Enabled - version 2.0Authentication method...

We have Cisco Secure client image files loaded on our FMC platform. I beleive these are loaded in order that a connecting VPN client that has an older version of Anyconnect can receive a newer version from FMC when the connection attempt is made. We ...

Hey,We have a production FMC running in VMWare that needs migrating to AWS. Having looked through a bunch of docos and peoples posts on this community and Reddit, it seems migrating FMC is just as painful as the actual product itself. As far as I cou...