Network Security

Hello Dearsi have the attched digram with VPC configration only between the two swiches when i reload the master VPC nexus switch there is a downtime about 1 min while this not take place since the firepower devices are confiagred as Active/Standby m...

Hi I have a Cisco ASA connected via a single VPC to 2 Nexus switches. Each nexus switch is advertising the same route with equal cost via OSPF. Does anyone know the command to show the load balancing algorithm. It seems to be working on a per packet ...

Hi, I'm working to migrate an ASA to FTD, when I run Migration Tool it's ignore esmtp inspection set on the global policy. Can I configure that policy manually on the FTD or realy is not necessary? !access-list esmtp extended deny tcp host 10.16.8.19...

HI all,I have a HA pair of ASA 5505's in a small setup.  The ISP wants to provide the Internet link with our end being given the IP via DHCP.I have the ISP connection connected to a switch (on Vlan3) and the ASA's are trunked off a switch pair.  So t...

 We have two vFMCs. We purchased the licenses SF-FMC-VMW-K9. To my understanding these are perpetual licenses for 25 devices. I have 50 available licences on Smart License Portal. I am seeing this error message on vFMC: 'Smart License usage is out-of...

Hi,I have an issue with changing NTP and DNS values on my HA of FTD2110.The 2 FTDs are connected to my FMC.I could not find how to change the NTP servers or the DNS servers> show NTPNTP Server : 127.127.1.1Status: UnknownOffset: 0.000 (milliseconds)L...

Hello, everyone. We have implemented Anyconnect RA VPN on FTD device. However now i want to restrict from which source global IP Addresses i can connect to. I now in ASA it can be done by control-plane ACL but in FTD i do not see any place to configu...

Hi,We currently use a public /24 IP range for a server network, we just had a request to access a server in this network over an aws vpc, however aws does not support connecting to public IP's.  Is there a way I can NAT this to a private IP  to allow...

Hi,   I have an issue with changing NTP and DNS values on my HA of FTD2110.   The 2 FTDs are connected to my FMC.   I could not find how to change the NTP servers or the DNS servers    > show ntpNTP Server : 127.127.1.1Status : UnknownOffset : 0.000 ...

Dears,I found the following log amongst the email received from our FTD:<173>:Nov 02 2022 12:44:28: %FTD-config-5-111010: User 'enable_1', running 'N/A' from IP 0.0.0.0, executed 'copy /noconfirm system:running-config disk0:/running-config-backup.txt...

Saw a very curious issue today.  Our estate runs Firepower 1120s in ASA mode running firmware 9.14.2.15. We found an ASA with firmware 9.16. Strangely, the 9.16 firmware was nowhere on disk0:, but after each reboot, the boot would persist to 9.16. We...

Hi all, First time poster.I have a VPN into GCP and from my normal LAN I can traverse the VPN fine and from other MPLS connected sites which also connects via the LAN interface from a Nexus. However from the DMZ interface on the same ASA which the VP...

Hi,I need the help. I have cisco C8300 router running in Autonomous mode. I can't enable MACSEC on interface level. When I try to enter the MACSEC command on interface level it shows invalid input. AS shown belowRouter(config)#interface tenGigabitEth...