Network Security

Hi, we need to collect FTD configuration changes logs in SIEM, which are mainly performed via FMC.On ASA we are just collecting 111010 syslog messages, but on FTD's no 111010 messages are sent, only 111008 and in each log the username is enable_1.We ...

Hello,,i have issue with my environment with standby IP address,,MY LAB as Follow :1- Two FTD 2110 works on the HA group successfully, 2- Enable Standby IP address on all interfaces the issue when switching over the node is the standby IP will work i...

Hello. I am trying to make an SSL VPN configuration in a firepower with the trial license, however it tells me that it is not possible due to licensing issues. Is it possible to request a full trial license for 30 days to be able to carry out these t...

HIi have deployed FMC and FTD but they not syncing. they are able to ping each other and version is 7.0 on both. Please help me in troubleshooting. Thanks

Hi Tech People, I have upgraded my FMC to 7.0.1 and try to register my FMC with Smart Account .I am facing the following Error during Registration.  1- First error on software 6.3/6.6  "Failed to send the message to the server. Please verify the DNS ...

Hi allI need to do a reimage of an SFR module running on an ASA 5508 and part of the process requires the ASA to have anonymous FTP access to an FTP server across the network. To ensure the FTP access is in place before starting the upgrade process I...

Dear All,we've a webserver inside DMZ and did manual NAT for outside access, and it works if its configured as below inputs, but if we change (Source Interface object: DMZ and Destination Interface object: Outside) it won't be accessible. Please advi...

I'm going to be transitioning from ASAs to Firepower devices. Is it better to manage a small number of devices locally, or to utilize FMC (which obviously has a sizeable $$ commitment)?

Currently, we are monitoring ASA uptime using SNMP OID 1.3.6.1.2.1.1.3.0 (systemuptime) and we get a reboot alert after uptime crosses 1 year 132 days +. though the device doesn't reboot in actuality. It appears that this OID is a 32-bit counter whic...

If logging is enabled on a policy within the FIrepower 2110, but not sent to a syslog server, does the logging locally have a size limit?  I am basically wondering if leaving logging on in this way will fill up the drive.

We are trying to implement an IPsec tunnel to send HTTP and HTTPS traffic to the umbrella cloud for DLP. We have been struggling with TAC for over a month now so I thought I'd see if anyone on here has any experience with this. We currently have one ...