Network Security

Hi,We still have some VPN site to site tunnels use group24. DH group24 (phase I)and set pfs group24 (phase II)I know we should move to group14, but for some reasons we could change it right way,I feel like using group24 cause a lot of unexpected issu...

Hi guys, I wonder if anyone has run into the problem recently with ASA Monitoring showing as disconnected? At first ASDM had an issue with refusing RADIUS authentication, but changing the default HTTP port fixed that. We continued to have problems wi...

Hi we have some routers which show security vulnerability. After disabling aggressive mode for tunnel, it has a good results. But one of them still has the issue. After checking, I found the tunnel is inactive. My question is what is a better way to ...

Hello, I am setting up a RADIUS server group for remote access VPN users. Everything is working fine, mostly, however I had question. What is the default behavior of the FTD for a failed RADIUS server? I can not find any information online. Basically...

I am running an ASA 5525-X on ASDM version asdm-openjre-7171.bin.My Windows 11 client and my client on a windows server 2012 R2 terminal server are running fine, no problems so far.As soon as I update to asdm-openjre-7171-152.bin and start ASDM on th...

Hellotry to enable icmp on asa in little gns3 project.on this time it's inpossible to ping from any inside adress toany adress, yes GW are added. this setup are new and clean. please how i can debug this?thanks for any possible help. Running Setup:BV...

Hi We got a lot of below in the firewall's log file.  We don't have anything set up with the IP 40.119.7.190.  Do you know how to stop this? May 03 2022 10:53:22: %ASA-3-751002: Local:216.xx.12.36:500 Remote:40.119.7.190:500 Username:DefaultL2LGroup ...

Hi All,I was hoping someone could shed some light on how I can create a bandwidth report to show utilization stats for traffic entering the inside interface and existing the outside interface on my Cisco Firepower ASA.I currently have a 'Connection S...

Hello,my costumer migrated his antivirus and now he has issues with anyconnect.He need to upload a certificate to avoid the alert on anyconnect connection.He need to contnue in local username AAA, no certificate authentication for user.Is there a way...

hi, is FTD readiness check disruptive for services? In other words, can I do readiness check in production time and be sure it will not disrupt services? br