Network Security

We replaced a HA secondary member FP2130 and made an attempt to keep and reuse the SSD from the original device. I had been aware that it is not written in the guides that it would work if we move the SSD from one device to another. But I would like ...

Hi,  I started a new job and the firewall was left untouched specially the access-lists and its really huge which I can't clean one by one so, I was wondering if there is any option through ASDM to remove unused access-lists for a certain of time (ju...

Is there a way I can see URL Database of FirePower Device ? Reason I ask FMC is reporting X URL as Favorable and Device is Marking same URL as Questionable as I review the FIrewall Logs.

Regarding traps generated by a Cisco FPR-1000 unit. We receive SNMP Traps to our surveillance system. The trap has OID: 1.3.6.1.2.1.88.2.0.2. This is the message: [1]unkVar1=E1/9 interface threshold reached[2]unkVar2=[3]unkVar3=[4]unkVar4=1.3.6.1.2.1...

Hi all, Due to faulty fiber interfaces on my secondary firepower unit, i will be getting a replacement FTD 2130.How do i get this replacement to replace the secondary unit of an existing HA cluster? Do i have to break the HA?Any production impact in ...

Good day everyoneWe blocked some IP addresses via security intelligence, either with "Update Feeds" and uploading .txt files of IP addresses in Network Lists and Feeds or in Connection Events and right click on IP address and add it to global block l...

I have a Firepower Management Center HA Pair running 7.0.1. There are a couple of 5508 firewalls and I notices that the last code that is supported on them is 7.0.1. What is the process of continuing to upgrade the FMC. Can I upgrade the FMC to a lat...

Is the ISR device is being managed by CSM v4.17, are ISO recommended IOS versions 15.6(3)M9 and 15.7(3)M8 compatible with our CSM?IOS version, Cisco Softwa

HiI would like to know if it is possible for IPS alerts to not send alerts for blocked events and only send unblocked alerts

Here's an example: A server in our HQ data center needs access to server in Branch data center on port 443.Currently, I would create 2 rules: 1. HQ->Branch port 4432. Branch->HQ port 443 Can you consolidate these into one rule?