Network Security

Any solutions about user expired date and password policy on 7606 and 7609?I want to manage password criteria policy just like:Minimum length of the password is 8Special-case such as *, &, @Password expires every 90 daysPrevent using the same/old pas...

My company has several Firepower 2130's across the network all being managed by FMC 2600. We have IDS/IPS functionality from the sensors. Currently we have our sensors set to IDS mode because once we change the IPS to prevention mode it drops all tra...

We are using version 7.3.2 and snmp is not connecting to the network equipment, I confirmed the username and password were correct, then using Splunk checked for traffic from the SMC to random network equipment and am not seeing any traffic from the ...

Hi all,i just bought and receive below item1. ASA5515-FPWR-K9 ASA 5515-X with FirePOWER Services 6GE AC 3DES/AES SSD2. SF-FP5.3.1-K9 - Cisco FirePOWER Softwarev5.3.13. ASA5515-CTRL-LIC Cisco ASA5515 Control License Question1. Is there any guide/manua...

Hi Team, I'd like to know if anyone of you have encountered an issue where Snort3 drop inbound emails from non-domains.(Ex: Gmail, icloud,Outlook.com)We've upgraded FMCv from 6.6.4 > 6.6.5-81 > 7.0.1-84 and then enabled Snort3. Once it enabled, inbou...

Hello, I am trying to start using the firewall 2100 via https, but for some reason I am getting this: System is coming up, please wait...Also the service is up, firepower-2110 /system # scope servicesfirepower-2110 /system/services # show ip-bPermitt...

I'm a programmer , and create a new and rare algorithm for data encryption ,it's not derived from other encryption algorithms.I need to communicate with one of expert team to showcase it, to check if it is of great benefit (as I see so far) so we can...

Hello all,I understand that Cisco ISE is a network access/admission control product that is deployed for enterprise campus wired & wireless networks.  Although nodes are typically located in the data center, I was wondering if CTS using ISE can be us...

Hi, I have 3 sites, A, B, and C. A - Would be the HUB.B - Spoke - WorkingC - Spoke - Not working. From site A end device I can ping the ASA from site B, but I can't ping site C even with the same configs and tunnels are up I still can't ping ASA site...

Getting this error on a production site to site VPN  when it comes with a Phase 2 mismatch (see attached config): %ASA-4-106023: Deny protocol src [interface_name:source_address/source_port] [([idfw_user|FQDN_string], sg_info)] dst interface_name:d...

 HIIf the other end of the VPN isnt allowing an IP address could it cause the Drop below, I run a Packet-Tracer and it says VPN drop, the rule for our IP address is identical with exsiting VPN's I'm scratching my head,so do both peers ahve to match o...