Network Security

We are analyzing the logs from all of our devices. Recently, a question came up on the %FTD-6-302013 message. It appears to be only happening on outbound connections from the inside network to the outside. We never see messages like that for connecti...

I'm running the VM version of the FMC.  I have 7.0.4 installed.  When I go to an SFR module and go to Advanced Troubleshooting, the only option I have is "File Download".  I don't have any tabs for Packet Capture or Packet Tracer.  What could be caus...

HelloI have Firepower 1120 and configured s2s VPN to 3rd party using parameters as belowIKEv1 Encryption AES-256 Hash SHA Lifetime: 21600IPSec Encryption AES-256 Hash SHA Lifetime: 3600DH14  With NAT nat (local_ip_pool,outsite_interface) source stati...

Hi all,We purchased the Firepower 2110 loaded with ASA. While sending from factory and there was no base license enabled.We commissioned the Firewall and while we are trying to access the Firewall from outside Network it throws an error as SSL. 

Hello Team, We have got a request from our client to add a security policy on the Cisco FTD(4115). The security policy has 800 Network objects(IP addresses and subnets) in the target field.  We are not sure how this will work because the firewall is ...

Hello all, we are currently on FTD version 7.1.0.1 and looking to upgrade to 7.2 or 7.3. A few months ago I had been reading that 7.3 had some issues with unintended restarts, configuration issues, reduced number of objects that could be held in a si...

How do we enable “dhcprelay information trust-all” in a Firepower 1120 running version 7.2.0.1? DHCP snooping is activated in LAN, and the firewall is acting as ip helper/dhcp relay. The firewall is dropping dhcp packets because we haven’t been able ...

We will be adding new keys to our existing macsec key chain such that the new key will have a lifetime that is immediately available and expires in 15 months. I wonder how often nodes with macsec look at the keys, or reverify them, such that I can mo...