Network Security

I have to update password on vFMC , multiple chassis and FTDs for GUIs and CLIs.Is there a guideline which tells where and how to do these updates?? Any help would be appreciated.   

Hello,Is the a way to get access to the Linux filesystem on Firepower 2130 with ASA software? Like #expert command on FTD?

I'm working with some offline ASA configurations that I need to merge and push as a single file to the FirePower Migration Tool.  It is purely objects, object-groups and ACLs.  I have removed all the NAT configuration as I'll create this manually as ...

I need to find a way to pull up a list of all signature releases for Firepowers running version 6.6.5.2 and I need to compare they latest releases to what is applied to my appliance.The point is, I need to confirm that the current version of signatur...

Hello all ,  I have Cisco ISE and the integration between the ISE and the active directory is done. The user  when he access the SW, routers, Palo Alto and F5 gets authentication from ISE by TACACS , but with FMC not working  NOTE: 1- Using the radiu...

A Nessus scan reported several of our devices are allowing weak key exchange algorithms and I have been asked to disable them. I have specifically been asked to disable:diffie-hellman-group-exchange-sha1diffie-hellman-group1-sha1on all devices. I've ...

We had to change the outside interface IP of a remote office FTD that was connected to a central FMC.  After changing the IP the FTD does not want to reconnect to the FMC.  The network objects were updated to the new IP address (for NAT, Policies, et...

This is my scenario:I am trying to move the webserver, ntp server, and some other internet-based servers to DMZ. I have re-imaged ASA to FTD, managed by FDM. I have some knowledge on configuring using cli, however, not much on FDM. I have configured ...

Hello, I am a bit confused about the PAT pool option when using auto NAT rules in FTD. From my understanding when reading the configuration guide, we should use this option if we need more than a single public IP address for translation. https://www....

We've had excessive Adobe downloads, so a system has been setup to download the updates from which we'll distribute them internally. Until this is done, we have a QoS rule that is restricting the bandwidth from all systems to Adobe. Now that the serv...

Hi AllHope you are doing fine.Recently I came across a DoS-related article which is as followshttps://geneva.cs.umd.edu/posts/usenix21-weaponizing-censors/Can anyone help me Protect TCP Middlebox Reflection by Cisco Firewall or any other solution lik...

Currently using FirePOWER, experiencing an unexpected SSL Block for some traffic, SSL rule has been created not to decrypt the traffic, URLs that are being accessed are whitelisted, SSL Flow error is Defer Cut Post CCs (0x0000197), SSL version TLSV1....