Network Security

Dear Team, there is a requirement that need to have static NAT between two sites.in both sites there will be multiple hosts and on a static NAT there is used only one single IP so,e.g LAN1 IPs 192.168.1.1, 192.168.1.2, 192.168.1.3 these IPs will be n...

Please help to know if anyway to fix this observation or any workaround.  The remote SSH server is configured to allow key exchange algorithms which are considered weak.This is based on the IETF draft document Key Exchange (KEX) Method Updates and Re...

HI all, is there a way to block or deny IP Address of a web site but still allow access per FQDN? I have access to both Cisco FMC/FTD and FortiGate set of firewalls.IP, FQDNe.g. https://mysite123.com resolves to 110.1.1.110/32 so if I type an IP addr...

Dear All, I'm trying to add Unifi Security Gateway to a Cisco ASA that is already configured, I want to have ASA as a second layer of security since the licenses of the URL filtering and malware protection have expired, so I want to add Unifi Securit...

Hello, We have a ha-pair 1120 FTD, where the active FTD shows disable on FMC. After logging in to the disabled FTD, we found a certificate error, and the time also shows wrong. So it was found out that somebody blocked the DNS and NTP  and TCP port 8...

We attempted to migrate from our ASA 5515xs this morning to FTDs. Needless to say when we tried to access the internet it was not available. We used the Cisco Migration tool and all settings (NATs, ACLs, interface settings, static routes, etc. ) seem...

I have a Cisco with two LIVE interfaces. They aren't failover controlled. I can ping one of the interface from the outside, but not the other. Packet capture shows the incoming echo, but no reply on the interface not working. TCP/UDP traffic works fi...

Hi, I have an FTD2140 running ASA 9.8(4)29 / FXOS  2.2(2.138) that I want to upgrade.  According to the download site, 9.16(2) interim is the current gold star version.  If I upload this package through FXOS, will the firewall reload into appliance m...

Hello,As i understand syslog id 111008-111010 can be used as an audit trail to record the changes in Firewalls...However, does an audit trail corresponds to policy change only ?Suppose a user runs "permit traffic same security intra-interface" can th...

Under vanilla IOS, is it possible to use both TCP flags (established, syn, rst, etc.) and service object groups? For example, I can create an ACL that only allows return traffic from established Telnet and SSH connections:ip access-list extended DEMO...