Network Security

Hi All,We have an FMC which has internet access but we manage it over an MPLS connection. All the FTDs managed by this FMC are connected with the MPLS connection. The Mgmt plane is configured with the IPs learnt via the same MPLS.Now we have a new re...

I just finished the packet tracer activity, 'configure IOS intrusion prevention system using CLI'. Now I'd like to create a custom signature that detects a certain piece of malware's behaviour like its port scanning pattern, using a signature engine,...

Hi Team,For a DSL connection of 500Meg Download and 50Meg Upload which is the best ASA model to put in place?Regards,Sanjay S

Hello All,I have setup VPN according to these instructions:https://www.petenetlive.com/KB/Article/0001682I have the default rule (Inside Zone Any Any to Outside Zone Any Any = Trust)I have a just in case rule (Inside Zone Any Any to Inside Zone Any A...

Hi there, I want to migrate Cisco ASA 5505 to Cisco FTD with Firepower Device Manager (FDM). I know that you can use Cisco's Migration Tool if you are migrating to Cisco FTD with Firepower Management Center (FMC). Is there any "easy" way to migrate f...

Hi everyone,There was a problem with my ASA 5545x firepower service. As a result of reimaging the firepower service, my permanent SFR license was deleted. If I lose the default permanent license, how can I get it back?thanks and regards

Hi , I would like to ask about snmp allow rule in ASA. let say our network is like below . App Server--->switch-->ASA--->SNMP server   I configure snmp configuration in server and switch to send log to snmp server. I want to know if it is enough one ...

Hello All,I just got a Firepower 1010 running 9.13 ASA code on it. I am consoled in and it looks like it was reset to default (ciscoasa> prompt).I have pushed the reset button more then 3 -10 second and powered it off and on (pulling power).I have tr...

A security audit has flagged the fact that the SSH services on our Firepower Management Centre 2000 appliance (running v6.1.0.3) is configured to support Cipher Block Chaining (CBC) encryption.   The security audit has advised disabling CBC mode ciph...

Hi GuysWe have a Cisco ASA 5545 with software version - 9.8(4)41We are having lots of strange issues going on with NAT, whenever we add objects, or amend NAT rules, it deletes random rules, changes source and dest ranges and randomly reorders them, t...

Hi all, We are planning upgrade of SFR modules in ASA5516-X to version 7.0.4. Looking at the firepower release notes it states that the 7.0.4 version of firepower requires the ASA to have the latest version of ROMMON, currently 1.1.18. I was under th...

Hi All,I've deployed a FMC managed FTD at a remote office, where it's managed via OUTSIDE interface.Usually with an ASA it's possible to query SNMP on the INSIDE interface through the IPSec.This doesn't seems possible with the FTD. ICMP doesn't work ...

Hello  team, I have to create  a new envirotment where Traffict  ( signals) coming  from outside ( internet ) has  to match in one of my ip publics, I have to nat by portforwarinng to a dmz and that it. Only with  ACL (  without ZBF) it works,  but w...