Network Security

Hi,we have seen that Firepower 1010 and ASA 9.14.2.x has Spanning-Tree BPUD Guard blocked port on connected Nexus Switch if at least 2 Ports (different VLANs) connected to same Switch. This does not occur in ASA 9.14.1. Hast anybody seen the same iss...

We are converting ASA artifacts to FTD.I noticed there was a import facility in FMC for objects but did not see anything for object groups. Is there a facility to import object groups as well, and if so, where can I find the required .csv structure f...

Hello When accessing a switch device in a remote location, you want to log in as an administrator by connecting the Radius Server, not the local account.It was confirmed that the Genian NAC server was connected to the Radius server and login was succ...

which destination and source IP and mac address pattern and other options are suitable to block for IPv6 traffic?

Hello, We had a hardware failure on our FTD 1120. We received a new device and decided to restore from a backup. However, the new device came with FTD version 7.1 and the backup was made with version 6.6. We therefore did a re-image to version 6.6 an...

Hi everyone, I'm trying to configure a read-only ASDM access with tacacs, but I'm not able to make it work. It's working fine for CLI access but when I try to login with ASDM it's accepting the username, starts loading and then prompts again with a u...

Hi All, I have issue on setting up Identity Source on FDM ..  LDAP configurations set up on the FDM looks ok as I have exact setting  on ASA firewall and works perfectly well. Please see the error below and greatly appreciated your help.  "Cannot con...

If I view the graphs for FMC in FMC GUI under System/Health Monitor/Monitor I see one diagram for Event rate. Example below: What type of events is this, all event types? Also 5.00 million events per sec seems wrong. What is the timeframe? Should the...

hi guys, we are facing issue with our ASA 5515x which was working fine but after enabling Unicast Reverse Path Forwarding and removing some weak encryption/hashing Transform-set, now all traffic is being blocked by Implicit Deny rule from all interfa...

Hello to all and thank you very much in advance for help and suggestion.I have to configure my Firepower 1010 to allow external users (internet) to reach my internal server where the website and cpanel services reside.My static ip is managed by the I...

Hi, looking for some help. i am working on a firewall with 750 rules. most of these rules are not set to log. is there any way to apply logging (at end) to a select bunch of rules in one hit. or am i looking at clicking 750 rules one at a time to swi...

How to export the Custom Signatures in SNORT format from Firepower? what are the steps to perform.

I am trying to view the current NAT translations in FTD and can only get information about outside addresses. Is there a way to see the corresponding inside addresses similar to information that would be displayed with the "show ip nat translations" ...