Network Security

I came across a configuration guide which mentions, in the Intrusion Policies chapter, GID 2 as " Tagged Packets.  (Rules for the Tag generator, which generates packets from a tagged session. )"  https://www.cisco.com/c/en/us/td/docs/security/firepow...

Hello,My Firepower chassis show this message at regular intervals and in /var/tmp, for example:smm.log 22585101but also (no logrotate?)smm.log.1 0There are also other large files (vdc.log).What do I have to do to create space?Is it possible to delete...

Hi all,The ASA FirePOWER Configuration tab missing in ASDM,How do i get the license key to activate the firepower service?Thank you.

The documentation mentions "When the disposition changes for a file you queried in the last week, the AMP cloud notifies the system."  How is FMC being made aware of this change? 1. Does the FMC pulls periodically the cloud for disposition updates fo...

Hi ALL , We are planning to move our production FTD from the global domain to the leaf domain. Will it have any impact on traffic?Br,SS

Hi all,i'm working on getting connectivity to port 8934 (and some others) for webex rigistration to our local gateway. out internal palo FWs are showing the traffic as allowed. but there is still no connection, so i got on our edge inet router to add...

I'm trying to configure Duo authentication per textbook on a Firepower 1140 using FDM (7.2.5.1-29). The AnyConnect VPN connection itself works fine when LocalIdentitySource is selected as Primary Identity Source with a local account. Also, the DuoRAD...

Hello, We want to create subdomains in our FMC and add a specific FTD device to each subdomain.  I have created two sub domains in the FMC and added one FTD device to each subdomain. It works when I create local users and assign them to a specific su...

I am managing FTD-1120s with FMCv both running v7.2.1 software.  In my ACP I have a GEO rule to block all outbound traffic to China, Russia, and I few other "hotspots".   When I search for events that match this rule, most of the traffic is from inte...

I have a pair of FMC 2500s running 6.6.7.1 in an HA pair which I've upgraded previously without issue.  I upgraded the standby unit to 7.0.3 successfully but when it rebooted, neither FMC can see each other although I can log into either one without ...