Network Security

Our regional offices have Firepower FTD devices (without FMC), each with two VTI interfaces to the data center, routing via BGP. We want to use DHCP Relay to point to a remote DHCP server (due to FTD's DHCP lacking needed config options). I don't wan...

Greetings: We are initially configuring a new (my first) Firepower 9300 in Standalone mode (not clustered) for testing with a standard Aviata/JDSU T-Berd 5800 test set and cannot get a successful test.  We have the test set configured properly (works...

Within the advanced tab of the access control policy there is option to set network analysys policy and a default IPS policy. Why would I not just create a blanket IPS policy that has everything in it I want blocked like Maleware/Explots etc rather t...

Hello, does anyone knows a supported and official Cisco method to create and mantain dynamic URL/IP list for Microsoft services like Azure and O365 for Cisco products like FTD and legacy ASA?Microsoft already provide urls or feed to consume and this ...

Hi ...I have cisco firepower 2110 with HA setup. I log into device 1 i get the error, "invalid chassis model. Please contact your administrator" However the secondary pair works that is device 2. Can someone help with the error please?>

Hello,  I would like to ask if there is a way for the FMC to send an email when someone logs in and his IP Thanks and regards, Konstantinos

Hi All,1. How do I export all rules at Intrusion Policy to csv file.I want to know what exact rules are enabled and blocked. 2. Could I export rules at Firepower Recommended Rules Configuration on  Intrusion Policy to csv file. @Instrusion Policy, @F...

Hello colleagues, i'm trying to find information about possibility to create FMC backup schedule to NFS remote store and the NFS location to be with authentication?   When i try to add NFS remote location the only options that i get are: host address...

Hi All I'm using ASDM 7.6(2) on my ASA 5525-x Version 9.4(3)11. Every time I'm working on NAT rules the screen get messed up (see pic). Is there anyone that know how to fix it. I have upgraded Java to 8u101 and still the same. Thanks Steen

Dear all ! With my Cisco N9K FX switch (v9.3), I would like to make sure that if there is an IP that sends more than X Gbps to an IP on my network, drop the source IP.It would help me to avoid some ddos attacks with ACLs. Anyone have an idea? How to ...