Network Security

In the process of getting Microsoft Intune workig but hit a wall with the cleints hitting"Drop-reason: (snort-blacklist) Packet is blacklisted by snort, Drop-location: frame inspect_dp_snort_snp_drop_frame_wcaller:61 flow (NA)/NA"A prefilter is no go...

Hello,  We have ASA Active/Standby Failover. I have noticed that Standby unit is in Failed state. For some reason sfr module in Standby unit is Unresponsive/Down. I'm a bit new into this so i'm not sure what is the best solution. Should i remove modu...

What platform in the lab would be closes to the C8300 Catalyst to test MACsec.

 I currently have an FTD that has public DNS configured on the management interface (>show network, >show DNS system have Umbrella IPs).  I have internal DNS IPs assigned to inside data interface using the platform policy.  I did not check enable DNS...

I have Cisco Firepower 4245 Firewall Active standby mode and Nexus 9k series on vPc pair , my connectivity like Firwall 1 porr1/1 to Nexussw1 port 1/3 and firewall2  port 1/1-to- nexussw2 - Port1/3.    And Firewall-1 port 1/2 is connected to Nexussw2...

We have a firewall that was purchased a few years back and we are trying to figure out if it is TAA compliant. The serial number of the unit is USE111NBQZ.

Hello, I have an ASA running on a FirePower2110 . I applied a config of another decommissioned ASA and, now, I can't log in. This is an old password that no one seems to remember. I've searched online for any information or Cisco documentation on how...

Hello everyone.I've encountered an architectural limitation in Cisco Firepower Threat Defense (FTD), which is managed via FMC, and I want to understand whether this is truly a platform limitation or whether I'm missing something.Scenario:I have an FT...

Greetings all. I have this little network I am working on and I have just came across an issue. The command I am trying to implement is"event manager applet BACKUP_CONFIG" . However, my issue stems from the fact that my other switches have taken this...

Hi, Please suggest migration tool, prerequisite and how effective it is in production environment.current : ASA5545new : FTD3210 (Locally managed or Cisco Security cloud control managed, both option i want to explore).also I want to know can we migra...

Hello, I see there is no way to "never shun" an IP address from the VPN Threat Detection feature on the newer ASA code. This needs to be added.  With CGNAT being common ISP practice, we need to be able to tell the ASA to never shun a certain IP addre...

I am getting below error in my vFMC, my vFMC is on 7.6.4. What could be the possible cause for this problem as earlier it was not there and it was updating automatically.Lightweight Security Package (LSP) Installlsp rel 20260126 2044Install Failed at...