Network Security

Dear Team,  FQDN ACLs on Firewalls are great.  IOS XE seems to support them, (there also fqdn objects that are available), but every time I am using ACL is not working.  Any input ? 

HiSo this morning I have created a new access control rule on Firepower and when I selected the intrusion policy I now see the below warning is can I still proceed with the new rule or could this cause issues.??  Snort 2 and Snort 3 version of this p...

Hi, I have upgraded both ASA and ASDM to version (12.4) & (7.131 (101)) respectively.  After the upgrade, I found out that console port is no longer working. In fact, I confirmed a working PUTTY with the default data rate: 9600, Data bits: 8, Parity:...

We have some Firepowers running ASA version cisco-asa-fp1k.9.14.2.15.SPA. We have RADIUS configured for user authentication, with fallback to local accountsaaa-server RADIUS protocol radiusaaa-server RADIUS (WAYSIDE_CBTC) host 10.7.0.13 key ***** aut...

Apologies for the lengthy question here. I'm in the process of migrating ASA with some PBR policy to FTD. Current setup:ASA has the following rule in the extended access list specified in PBR policy Line 1: Source: PBR_source IPs  Destination: Office...

Hello guys, Please I need some help trying to find out what is going on with my ASA5506 firewall, after some time working fine it went into an infinite loop. I put the whole log from start to finish to see if anyone can take a look and help me with t...

I have Cisco ASA 5585-X single chassis with two SSP-60 inserted on both slot (slot0 and slot1). I have configured HA setup between both SSP-60 and failover is working great.  Now i have concern about does slot0 control slot1 in any case or both SSP m...

Is it worth climbing the Cisco ladder for security or is it worth focusing on the cloud based certifications ladders such as the AWS ? I personally am interested in pen testing.maybe forensics. And still love my hardware . But alas outdated or dead e...

In my environment, firepower1140(ASA appliance mode) e1/2 is connected to Catalyst 2960S Gigabit port.And we find the following occurence. e1/2(auto/auto)-2960S(auto/auto) ->firepower port status : up(1G/Full)e1/2(100/Full)-2960S(auto/auto) ->firepow...

Is this the new unidirectional icon? Usually, it's just an single arrow pointing to the right...? Not sure what this icon symbolizes? Looks like a crying ninja start, but may make sense to something else. 

hi,i'm seeing this a lot in our NCS 540 router logs which shows SSL certificate error.i don't see any issue with smart license as everything shows as 'authorized' and router can reach SCH cloud server.i also don't use any SSL/TLS cert or PKI. is this...

Hi, my fmc pair seems to have some sync issues. I can see that there is a VDB mismatch. Any idea why my primary fmc did not sync its VDB to the secondary fmc? I tried to manually upload the VDB to my secondary fmc but it fails. I tried to reboot the ...

Hello, I think I understand what is needing to be done here with erasing all setting and resetting them with what is on the word document but there is something about the ACL I am not quiet sure about. I could use some help or feed back please and th...