Network Security

Hello EveryoneI am trying to block websites at a specific time, and for that, I thought of using time-based ACL with regular expression with MPF config. Can someone please tell me if I can combine both and achieve my goal? Thanks.

I have a pair of 1140 in HA running FTD 7.0.1.1 - The FMC is also running 7.0.1.1. They are fairly simple configured (12 ACP rules), but I keep getting warnings says "Deployed configurations are too large"  The alert details shows this:Memory Allocat...

Hi All. Is it possible to use a firepower firewall to grant time based access to a management network from an administrative network.I would like to use 2 factor validation for the session. /Arne Larsen

I am running multiple NGFWv in our AWS environment from the marketplace. When trying to setup the EC2 instance for the firewall image and if I selected to encrypt the ebs volume with default aws/ebs key then the appliance does not respond on boot up....

Hi All,We have a Cisco Network Analysis Module [Prime NAM] Version : 6.4(2) This NAM has been patched with latest version of NAM already . However our Qualys reports shows that it is affected by the below vulnerability .QID-82054 (TCP Sequence Number...

Hello, We have a Cisco ASA 5508-x with SFR module in our company. The FMC's software version is 6.3.0 and the SFR module is 6.2.0.5. I know that updating the FMC to 6.6.1 is quite easy through the web interface but my real challenge is updating the S...

FMC displaying "The server response was not understood. Please contact support." at the GUI login.After an attempt to upgrade our backup FMC from 6.6.1 (build 91) to the latest 7.0.4-55, the GUI does not allow login and gives the "The server response...

Hello, I have a problem creating the CSR on my FTD. when I try to commit an error si show: Error: Update failed: [Certificate request subject name in keyring firepower_cert cannot be resolved]FP-4120 /security # create keyring firepower_certFP-4120 /...

Im having trouble updating our backup firewall, an ASA 5516, to 9.8.4.45. Its currently on .41, and after Ive installed latest ASDM and ROMMON updates fine, after i upload .45 and set it to boot, and reboot, it attempts to load it, says "error execut...

Hi,I'm beeing bombarded with tons of the following critical syslog messages:%ASA-session-2-106001: Inbound TCP connection denied from 62.40.54.215/2189 to 200.x.x.x/445 flags SYN  on interface outside%ASA-session-2-106001: Inbound TCP connection deni...

Hi,I use x forwarded so my firepower can see the original source ip address instead of proxy ip adress. All works, but there one problem. The x forwarded tag also goes to the internet. I want to remove this tag before its going to the internet. Is th...

Hi,So i have a proxy and a firepower.If user on my network want to access internet, they traffics goes to proxy first and then goes to firepower. The problem is, on my firepower, the source ip become proxy ip instead of original ip. I want to change ...