Network Security

Hello guys,ISE version 3.2 patch 3, we want to change our old MFA server, to a new one, running Radius NPS (windows). From my understanding, I need to configure a Radius Token Identify source. This has been configured, I've created a local user, then...

Suddenly the FMC does not display connection events prior to September 8, 2023. While it correctly displays all "file events", "intrusion events" and "security intelligence events". Only the connection events have disappeared.FMC Version 7.2.4 

Hi GuysI am looking to set up saml for my remote access vpn. I have done this on some ASA 5545 that we have but I have come to do it on an ASAv running version 9.12 and the method on the gui does not have the option for SAML.Any ideas why this is ? d...

I have another issue on a new vFMC & FTD 2110 7.3.1 deployment. It may be an issue with my understanding or not.I currently have a rule created as below, IP's have been changed.:Source                Destination                Ports                  ...

Hi,I upgraded FMCv from 6.6.5 to 7.2.4. A few days later, my active-standby HA pair of FTD 6.6.5 devices failed over during resilience testing. FMC gave a health monitor alert about interface changes detected. In the Interface config screen for the H...

greetings!! i was wondering if anyone has come across the issue of configuring DUO SSO remote access VPN (saml), where the DAP DfftAccessPolicy Action: terminate is responsible for terminating the VPN. When the action is permit, the vpn is successful...

Hi,I have two FTD's managed by FMC. at times its cpu hits 100 % . I figured out that when there is heavy traffic passing through two interfaces the snort process chokes one cpu.there is 230Mbps data throughput between two zones/interfaces on FTD when...

Logged into my ASA this AM and I'm seeing a ton of "authentication rejected" warnings coming across from 3 different IP's.  Seems like someone trying to brute force SSLVPN.  I want to block these IP's from even being able to connect to my ASA (which ...

Dear Cisco IDS/IPS Experts,I have two questions:1. Can the Firepower IDS/IPS detect Layer-2 attack based on EtherType and MAC address anomalies?2. Based on my experience 4-5 years ago, no IDS/IPS can detect Advanced Persistent Threat (APT). The anoma...

I faced the attached error when trying to open or untar Cisco FMC virtual VMware image 7.2.4 file  I have downloaded cisco FTD image 7.2.4 also faces the same issue  

Currently got FMC 7.3.1 upgraded from 7.2.4 and im getting a Health Status warning saying Sybase Status - Test Failed.Have tried the following:pmtool restartbyid slapmtool restartby id TomcatHas anyone come across this issue and how to resolve?