Hi there,Does allocating an IP to diagnostic interface would cause traffic to the firewall drop completely?Just learnt this by the hard way. Diagnostic interface is enabled by default so I just added an IP, same range as the management interface as i...
Forum Posts
Hi everyone, I'm setting up a Firepower (FDM on box) running version 7 as part of a lab environment to prepare for some network changes in our production environment to try to avoid getting stuck late during implementation. I was trying to create a s...
Resolved! Network security presentation topics?
Hi everyone,I’m a new cybersecurity analyst, and I’ve been tasked with creating a presentation on network security. The main focus is on configuration, setup, best practices, or technologies expected to emerge in 2024. relevant topics in CCNA may als...
We launched Cisco ASA instance from AWS marketplace asav9-14-1-10-ENA-87868dac-850c-4c36-ba33-ff3d39a724ac-ami-0c0a65e104f6b08a8.4 (ami-0ad85ff80bee59491)https://aws.amazon.com/marketplace/pp/B00WH2LGM0?ref=cns_srchrowOur users are using it for devel...
Hi team,FMCv 7.4.1 and FPR2140 running 7.2.7 We are seeing an issue with BGP failing on FTD 2140 with AWS.Not established exactly when this has started, potentially since when we upgraded the FTD about 9 days ago.Only one of the peers is down and ot...
Is it possible to configure any type of email alert from a FTD 4145 to notify if the BGP peer link goes down? Thx in advance.
I saw routers and firewalll having options to block cookie and java.But is blocking java equal blocking javascript?bank web using javascript and cookie.but these options exist, which kind of situation that will use these option and still can use inte...
I am using Prometheus SNMP to get info from my Cisco ASA 5585 clusters. However, I was unable to find any MIB/OID containing information about last failover - neither time nor a reason. Pretty simple information that exists in CLI. Could someone, ple...
Resolved! Port 3306 shows open on a ASA 5525X
Hello I want help on a case that our ASA firewall is being scanned on a management interface and it shows that port 3306 is open and our QSA told us to verify it or close. Normally we use only ssh to access the firewall. So, please assist us why thi...
Hi, hoping to get some feedback around best practice on certificate validity periods for EAP-TLS certficates for 802.1x clients.Thoughts around setting expiry for over 2 years etc.
Hello all, we are in the process of having a separate network for physical security devices add. This supports cameras and door sensors etc… We don’t want to put this on the same production network and we don’t wish to manage this ourselves.The idea ...
Greetings! I inherited a network where the primary firewall device is an ASA 5506 (we're hoping to upgrade later this year).Before I came on board, we had Comcast's EDI service installed. They provided a layer 3 IP and a block of usable static IPs. C...
Hello all, Our client has a problem with FMC like once a week when they try to log in after giving the credentials it just freezes on log in page and doesn't log in. They have to reboot the FMC so they can log in again, and than the problem will occu...
We are running two Firepower 1140s managed by a FMCv. Both are running 7.2.7. We have the AMP for networks subscription. When I search in my Malware/File policy to scan for .hta files I cannot find that extension. Has anyone else been successful in s...
