Network Security

I got below vulnerability in one of the FTD 2110 configured as Transparent Firewall Vulnerability :: SSH Server CBC Mode Ciphers Enabled. The SSH server is configured to support Cipher Block Chaining (CBC) encryption. This may allow an attacker to re...

Hello our switch Cisco WS-C2960L-SM-24PS has this vulnerability and the recommended solution to this is to obtain new SHA-2 signed SSL/TLS certificates to avoid web browser SSL/TLS certificate warnings. Can you please guide me on how to do this or su...

We recently updated our Cisco Firepower FMC and ASA sensor to version 7.X and realized the the User Agent software is no longer supported. I've been researching this and it seems that the new alternative is to use the ISE product. We have active supp...

Hello Fellows, I need your suggestion before moving forward with the migration Tool use. 1) I have existing FTD running in FMC 2600. I am planning to add new FTD on same FMC, if i start migrating ASA config to new FTD, will it create new ACP or prefi...

Hello So, I wanted to figure something out here. Currently I have an ASA-5508-X w/ Static WAN IP. I have PAT to LAN 192.168.1.0 Subnet which connects to L2 Switch.. Plug N' Play in a sense. Whatever I plug it, it has always grabbed it's unique IP add...

Helping on a project that has a simple requirement — to lock down our switches and routers to have 2FA for administrator access.  But, we’re out of our element on implementing this – and could use advice. We do not have any sort of directory right no...

The management interface of my FPR1010 running 7.0.1.1 managed via FMC responds to HTTPS (tcp 443). Any reason for this? I've tried to change platform settings, but platform settings do not apply to the management interface. There are 2 problems:It r...

Dear Team, there is a requirement that need to have static NAT between two sites.in both sites there will be multiple hosts and on a static NAT there is used only one single IP so,e.g LAN1 IPs 192.168.1.1, 192.168.1.2, 192.168.1.3 these IPs will be n...

HI all, is there a way to block or deny IP Address of a web site but still allow access per FQDN? I have access to both Cisco FMC/FTD and FortiGate set of firewalls.IP, FQDNe.g. https://mysite123.com resolves to 110.1.1.110/32 so if I type an IP addr...

Dear All, I'm trying to add Unifi Security Gateway to a Cisco ASA that is already configured, I want to have ASA as a second layer of security since the licenses of the URL filtering and malware protection have expired, so I want to add Unifi Securit...