Network Security

Hello I know this question is questioned a lot, but i need help to understand the steps and configuration. FMC ----> FTD-HQ -----> WAN ------> FTD-RemoteI need to understand the procedure.1--> FMC_REAL_IP ----> FMC_NAT2--> i need to configure mgmt in...

We have a DMZ security zone on FTD and it has multiple VLANs / sub-interfaces, I found out every ACP created actually are duplicated to all VLANs / sub-interfaces, for example, my intention is:Source -> DMZ -> VLAN-A/Sub-Interface-A -> App-ASource ->...

  HI   We are using CyberArk PSM-SSH to SSH to ASA. The PSM-SSH application only supports diffie-hellman-group15-sha512. how do I upgrade the Key exchange to diffie-hellman-group15-sha512 (or higher) on an ASA  the Current supported Key exchange gr...

Hello,I've been reading through Cisco's site to site documentation and wanted to confirm there's no possible way for a site to site vpn to have both tunnels active? Seems you can only have active/passive. FMC 7.0 using FTD 2100 series. Thanks in adva...

Hello So on an inside server (192.168.5.42) I am running an NGINX Web-Server which absolutely needs to be on Port 80 and 443. My FPR1010 has, by default, https access via 443, so when I connect to x.x.x.182 (WAN) (which connects to 192.168.5.42) on h...

Hi everyone,I'm trying to figure out if it's possible to provide the blocking page when a virus/malware is blocked, from the tests I've carried out it would seem not, the blocking page is displayed only with the URL filtering feature.So I wanted to a...

Hey! Currently working on FTD 1120 which is managed by FDM, and my query is. FDM-6.6.1-91 VDB-336.0 - Configured Two ISP links on FDM with sla monitor. -Basic configuration one access-list for Lan users to access internet and Nat policy which is in a...

The company I work for re-located their ASA 5510 to a new office location with a new static IP assigned to us from our ISP. If I update our NAT rules with this new static IP do I need to run the clear xlate command or should I just add new NAT rules?...