Network Security

I need to find a way to pull up a list of all signature releases for Firepowers running version 6.6.5.2 and I need to compare they latest releases to what is applied to my appliance.The point is, I need to confirm that the current version of signatur...

Hello all ,  I have Cisco ISE and the integration between the ISE and the active directory is done. The user  when he access the SW, routers, Palo Alto and F5 gets authentication from ISE by TACACS , but with FMC not working  NOTE: 1- Using the radiu...

A Nessus scan reported several of our devices are allowing weak key exchange algorithms and I have been asked to disable them. I have specifically been asked to disable:diffie-hellman-group-exchange-sha1diffie-hellman-group1-sha1on all devices. I've ...

We had to change the outside interface IP of a remote office FTD that was connected to a central FMC.  After changing the IP the FTD does not want to reconnect to the FMC.  The network objects were updated to the new IP address (for NAT, Policies, et...

This is my scenario:I am trying to move the webserver, ntp server, and some other internet-based servers to DMZ. I have re-imaged ASA to FTD, managed by FDM. I have some knowledge on configuring using cli, however, not much on FDM. I have configured ...

Hello, I am a bit confused about the PAT pool option when using auto NAT rules in FTD. From my understanding when reading the configuration guide, we should use this option if we need more than a single public IP address for translation. https://www....

We've had excessive Adobe downloads, so a system has been setup to download the updates from which we'll distribute them internally. Until this is done, we have a QoS rule that is restricting the bandwidth from all systems to Adobe. Now that the serv...

Hi AllHope you are doing fine.Recently I came across a DoS-related article which is as followshttps://geneva.cs.umd.edu/posts/usenix21-weaponizing-censors/Can anyone help me Protect TCP Middlebox Reflection by Cisco Firewall or any other solution lik...

Currently using FirePOWER, experiencing an unexpected SSL Block for some traffic, SSL rule has been created not to decrypt the traffic, URLs that are being accessed are whitelisted, SSL Flow error is Defer Cut Post CCs (0x0000197), SSL version TLSV1....

Hello, I have 2 FTDs in the environment which are being managed by FMC. I want to generate Reports for CPU and Memory Utlization for the FTDs. I have enabled CPU Usage alerts in Health Policy , however how can Reports be generated for a particular da...

I setup File Policy by just watching a video on how to do so. I am not sure how the policy actually works. Looking at the below are these files actually all being scanned for maleware in the cloud??? How do I know I am setting things up properly and ...

Hi All, We have NPS configured to authenticate access to our ASA and it doesn't not appear to be working properly.  The logs for the NPS indication I was granted access, it reflects the policy I created in the log details but the ASA rejects the logi...