Network Security

Just added a application bit torrent rule to our firepower,The bit torrent traffic get blocked, but any other traffic that is not BT is allowed and does not hit the rest of the access control policy.I can see this in a packet trace.Is this normal pro...

Lets say, in august firepower have 100000 intrusion policies. Then i use firepower recommendation in august and it applied 9000 out of 100000 policies. Now in september, firepower has an update from 100000 intrusion policies to 105000 intrusion polic...

Hi Community,On an Asa 5505 i want to add a Identity Certifikate. I have a new Certificate File (.crt) But i need a Passphrase. What passphrase please?So this do not works.Next Idea: Converting the Certifikat. So i need my "private key" stored somewh...

I have ASA 5516-x series device running with FTD code version 6.2.3 I was trying deploy the ACL policy changes via FMC but unfortunately I am getting the following error : Log All Connections : This rule requires a Base Compliance , but at least one ...

Hi, Im new to Firepower. I have more than 100 servers that i want to use known key decryption for. Is there a tool that automatically input the policies or i have to manually input the policies?

I am seeing asp packet drop on FTD in my captured logs for one of the website which user is trying to access on https. It is a intermittent issue where couple of time website is not opening or opening slow.1: 23:07:25.774770 802.1Q vlan#2926 P0 14X.X...

I have an FTD HA cluster which is added in Algosec for Optimization... recently i noticed that the object count and service count statistics are different for different members as shown in Algosec Config.Is there a way to verify this from Firewalls ?...

Seeking insight for activating the generic HTTP Response Page (Access Denied) for the Cisco FTD 1010 utilizing Firepower Device Manager v7.1.0.  For ACL Policies that are Blocked utilizing URL Categories, within the policy editor, I do not see the op...

Azure FMC version 7.1, Firepower 2110 running FTD version 7.0.1, now only getting the below after a couple of initial successes for the the weekly FMC task.Scheduled Task: Download CRLStatus: Job failedFailure: Unable to download/move CRL file:The 's...

So i have a proxy and FTD. Every connection to the internet goes to proxy, and use proxy certificate. The problems are, proxy only decrypt/ resign HTTPS traffics. So i want the firepower to inspect other encrypted traffics such as FTPS and other traf...

Hi everyone, A customer approached us with a unique issue, He wants to get NAT type A or B to have a better connection to Nintendo's online services for Smash Brothers Ultimate (for school esports) Typically on a home router, you would simply go the ...

Hello Sir,Please I am having issue with a user who I want to have read only access to the firewall. Below is the command I use:username DKamenuveve password xxxxxxxxxxxxxxxxxxx priv 5The user is still able to execute configuration commands and save.T...

I am trying to re-mage an SFR module on an ASA but when I do a system install via ftp, I get a permission denied error. I have ruled out the FTP server as the issue as I am able to FTP to a totally different set of firewalls so that should rule out t...

Hi everybody.I manage an ASA5525-X with ASA Firepower. I have to ay that this is the first time I had to manage an ASA with firepower included. I have to allow a website that's being blocked (legitimate website) but I don't know where is the right pl...