Network Security

Hello, We want to translate outgoing traffic to a specific public IP based on source interface and then use the outside Interface address as a backup if the PAT pool gets exhausted. This is the configuration I’m using for this: I have created a dynam...

Does anyone know why I can't find /var under the /Volume (per the following snapshot and under the release note here: https://www.cisco.com/c/en/us/td/docs/security/firepower/70/relnotes/firepower-release-notes-700/upgrade.html#Cisco_Concept.dita_856...

Hi,i'm in a situation where i must find how much RAM is reserved for a specific context on a Cisco ASA FW, the FW is running multiple contexts.i have tried show memory command, but this command only dispalys how much RAM is currently in use by the co...

I have to update password on vFMC , multiple chassis and FTDs for GUIs and CLIs.Is there a guideline which tells where and how to do these updates?? Any help would be appreciated.   

Hello,Is the a way to get access to the Linux filesystem on Firepower 2130 with ASA software? Like #expert command on FTD?

I'm working with some offline ASA configurations that I need to merge and push as a single file to the FirePower Migration Tool.  It is purely objects, object-groups and ACLs.  I have removed all the NAT configuration as I'll create this manually as ...

I need to find a way to pull up a list of all signature releases for Firepowers running version 6.6.5.2 and I need to compare they latest releases to what is applied to my appliance.The point is, I need to confirm that the current version of signatur...

Hello all ,  I have Cisco ISE and the integration between the ISE and the active directory is done. The user  when he access the SW, routers, Palo Alto and F5 gets authentication from ISE by TACACS , but with FMC not working  NOTE: 1- Using the radiu...

A Nessus scan reported several of our devices are allowing weak key exchange algorithms and I have been asked to disable them. I have specifically been asked to disable:diffie-hellman-group-exchange-sha1diffie-hellman-group1-sha1on all devices. I've ...

We had to change the outside interface IP of a remote office FTD that was connected to a central FMC.  After changing the IP the FTD does not want to reconnect to the FMC.  The network objects were updated to the new IP address (for NAT, Policies, et...

This is my scenario:I am trying to move the webserver, ntp server, and some other internet-based servers to DMZ. I have re-imaged ASA to FTD, managed by FDM. I have some knowledge on configuring using cli, however, not much on FDM. I have configured ...

Hello, I am a bit confused about the PAT pool option when using auto NAT rules in FTD. From my understanding when reading the configuration guide, we should use this option if we need more than a single public IP address for translation. https://www....

We've had excessive Adobe downloads, so a system has been setup to download the updates from which we'll distribute them internally. Until this is done, we have a QoS rule that is restricting the bandwidth from all systems to Adobe. Now that the serv...