Network Security

Hey I m new to network security. Need to design below setup. Advise how will I achieve thisI have partner connected to network.  I want my hosts in DMZ via RDP from GRN able to access the services . Also any antivirus update or patches needs to be up...

We have Site to Site VPN setup between few servers to a vendor. However seems all traffic including these servers internet destined traffic is also passing through the S2S VPN. How should I exempt internet traffic from S2S VPN

Hi All, Need to configure below password policy on my live Cisco Asa. Need to know will i lose the accessibility of my device anyhow after configuring the password policy. Also what are the precaution i should take before executing the command • Step...

We setup our FMC (6.4) to be a Pxgrid subscriber to Cisco ISE. ISE has several agents inastalled to retrieve user-to-ip mappings. I can't seem to find any information about how often:1/ ISE pushes user to ip mappings to the FMC2/ How does an FTD retr...

I’m looking for assistance with a rule and NAT policy Attached are the ports the phone company needs forwarded. I have the static IP of their system they are testing from and a user’s home static IP. Do you have an example of how the rules should be ...

Hi ALL Any option to enable stun protocol inspection for specific rules only in FTD2110If not do we need to enable it in global policy ... what are supportive commands to enable this protocol This is what we see atm > show service-policy inspect stun...

Hello, Exploring port-channel configuration on the firewall for redundancy but to my surprise, it not supported on FTD running version 6.3.0-80. require FMC to do it.https://www.cisco.com/c/en/us/td/docs/security/firepower/630/fdm/fptd-fdm-config-gui...

Hello, I have a customer that has a few ASA5510 in their environment.  I realize these were end of support back in 2018, and have also read that the last software version supported on the platform was 9.1.x.  Can anyone point me to information about ...

Hey everyone,I'm running into some issues with my testing and I'm hoping someone can assist me with this as I'm a little lost.First problem I've come across. I'm browsing the security intelligence feed that's in var/sf/iprep_download/Sourcefire_intel...

my post marked as spam i dont know whyi am doing a lab with packet tracer and i cant reach inside network to dmz asa config  hostname ciscoasanames!interface GigabitEthernet1/1nameif dmzsecurity-level 50ip address 172.19.3.1 255.255.255.252!interface...

I have 55 users connect to two switches each switch has two cables each one for a Different FW one FW for VPN and one For Internet, ( each one also BKP for other ) each FW has one Cables to Provider other Site has one FW only now : between Switches a...