Network Security

So initially we deployed a pair of FTD's 4120's running 6.6.4.We ran into an problem with limits to groups size as we have more than 100 entries in some of our groups.  We had to split the groups, ( each group had not more that 100 in each).Since upg...

Hi there, are there any best practices out there how to setup Firepower via FMC with Prefilter, QoS or Trust rules to bypass traffic for web conferencing (MS Teams and Webex)? We see audio issues and poor audio/video qualtiy when users are sitting in...

Hello everyone, We faced this issue more than year ago. Software version is ASA 9.12.4 or 9.6.4. We had few cases in Cisco (like 692054705) and in our local support partner. But it looks like nobody have real willing to do anything with this bug. Aft...

I have my Firewall set as my outside device. It is using dhcp from my ISP Verizon to get its public ip. The problem is Verizon changes the ip and the firepower doesn't retry the Dora process to get another IP. Is there a way to create a flex config t...

Cisco ASA 5512-x with 9.12-4-37 in a HA-config.I have seen this problem on ASA  5585-X with 9.12-xx-xx When I use this following command on my ASA, it works problem less:ssl cipher tlsv1.2 custom ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-GCM-SHA...

Hi Everyone , I would like to know ASA firewall can make rule policy source-ip or destination-ip with naming URL or can define object group for URL example object network Ahost test.local access-list Test extended permit tcp host x.x.x.x  object-grou...

Hello, My primary asa has become standby and the secondary has become active.How to get the primary back to active and vice versa?

Hi Everyone, I am still confused with the answers. Can anyone help me to answer the question and tell me why please?  Cheers,Gordon 

Hi Everyone, Can anyone answer this question and tell me why please? why option 1 is not corret? Thanks,Gordon

Hello Everyone, I have a FTD pair in HA with active standby configuration. Both peer are connected to DC switches using VPC. A direct failover and staelink is connected between both peers. We do not have any data interface monitored or standby ip con...

Hi all!    New to FTD...    On other firewalls I've worked on, you could set up a "virtual" IP on the firewall itself that it could then NAT to hosts behind the firewall.  I know where to set up the NAT rules using FMC, but where do we set the additi...