Network Security

HiI have FMC 7.0.4 and two FTD 1120 in HA v 7.0.1.I am testing file policy with rule: block all files in all directions. SSL decryption is configured and working. All files have been blocked except .docx, .xlsx, .pptx files.I do not have event that f...

Hi,so i want to use Rapid Threat Containment on my system using firepower and ISE. the Rapid Threat Containment action is to quarantine/ block user access to network. The problem is, i scare of the possibility of false positive. Also the remediation ...

HiWe are experiencing an issue with our FMC scheduled backup. If I configure Remote storage for our SFTP server. We get the backup failed error when the scheduled backup runs.If I configure the remote storage to local storage, then copy when complete...

Hello,We have a Cisco ASA5516 firewall with Cisco AnyConnect VPN license. The unit has failed last week and the device is not under support. We would like to move the config to a spare unit but not sure how to transfer the Cisco AnyConnect VPN licens...

I am trying to proof of concept setting up alerts using concern index in stealthwatch.  I'm doing a simple test for POC.  I setup an alert to have stealthwatch increase the concern index of a test PC if it receives ICMP packets.  I'd then like to thr...

Is it possible disable diffie-hellman-group1-sha1 in a Cisco 2811 Os v.12.4(24)T2 router? I put this command: > ip ssh dh min size 2048 for 2048 bits, but in security scanning says that it permits: | kex_algorithms: (3) | diffie-hellman-group-excha...

hi, so i'm integrated my firepower with ISE, and i have a rule that will quarantine user that try to access something dangerous. The quarantine option come from ISE, but Firepower is the one that trigger the action.I want to ask, if user get block in...

So, i integrate identity policy on firepower with my active directory. All works, but there one problem. Somehow when i see the traffics log, i can see the user password.Anyone know why this happen?For my use case, i just want to use identity policy ...

So i have a LAN network, I also have a storage in that LAN server. The problem is, right now if i send a file from my PC to the storage. The protocol being used is FTP. I want the file to be encrypted, so other people can see what i send in the netwo...

Just added a application bit torrent rule to our firepower,The bit torrent traffic get blocked, but any other traffic that is not BT is allowed and does not hit the rest of the access control policy.I can see this in a packet trace.Is this normal pro...

Lets say, in august firepower have 100000 intrusion policies. Then i use firepower recommendation in august and it applied 9000 out of 100000 policies. Now in september, firepower has an update from 100000 intrusion policies to 105000 intrusion polic...

Hi Community,On an Asa 5505 i want to add a Identity Certifikate. I have a new Certificate File (.crt) But i need a Passphrase. What passphrase please?So this do not works.Next Idea: Converting the Certifikat. So i need my "private key" stored somewh...