Network Security

if I look at my public key on ASA it shows a size of 4096 Key name: <Default-RSA-Key>Usage: General Purpose KeyModulus Size (bits): 4096Storage: configKey Data: However an nmap scan keeps reporting the keysize as 1024 C:\WINDOWS\system32>nmap -sV --s...

After upgrading from 9.12 to 9.14(3), my ASA is not sending DHCP Discover packets out the interface configured. I see repeated attempts on "interface 2" (whatever that is) in the dhcpc debugs, but per packet captures on the interface, they are not ac...

Hello all,I have configured the FTD (FPR-1120)server, it is working fine. Unfortunately, I added wrong IP address in FTD server external interface. I want to change the IP access or delete but I could not change the IP address so how can I change or ...

Hi,We've had some problems with the FMC undefining objects on deploy randomly. Usually it removes existing time range objects, causing rules that use them to be active all the time.On deployment transcript the following lines can be seenFMC >> time-r...

I have what I think is a fairly straightforward configuration, though I cannot quite seem to get it working.  I need to have a few different DMZ hosts with PAT on a specific IP (that's not the ASA interface IP), where also if one of these hosts initi...

Hi all,  I am trying to create an Inline set on my FTD appliance and have some confusion.  I have included a basic diagram of my setup that I am trying to do.  I have a multi-layer switch (Switch1), Router1 and Router2.  The switch and the routers fo...

Hallo, i have a cisco switch WS-C2960S-24TS-L and its now EoL, and i want to update this Switch, which it is now inproduction enviremont.Is there any problem or bugs, if i update this switch?  Thanks

So I have a few issues I've been slamming my head against and it might have to do with my topology, but I don't think so.I am sitting behind R1 R2 and R3 and then there is the ASA at 10.10.129.4.  I can reach anything on 10.10.129.0 that isn't using ...

Hi,I have a customer with over 30 FTD devices that we manage from a FMC. There are two different IPS policy’sconfigured. If I go to Policy’s->Intrusion in FMC, there is a tab called "Usage Information" and there I can see that one of the policy’s is ...

Hi,We have a customer inquiring if their Firepower VM appliance is impacted by CVE-2021-4034 vulnerability. It seem to be related to VMware.  Can anyone provide any information for this?  Unable to locate anything for the FMC. Any direction would be ...

Thanks to @Rob Ingram for pointing me to this LINK the other day. That said, I'm confused with Step 8 forward. Specifically, if I'm going to manage the FTD via a data interface (outside interface in this case), why would I care about the management i...

Can a Cisco ASA5525X do MSDP and if so is there a configuration document?

Hallo, i have Cisco ASA 5515, and its Eol and EoS is on 2.Aug 2022, because of that i wanna go to new appliance from Cisco. I checked in Cisco but they said that there is no replacement for this product. What i can do with it?!!!! https://www.cisco.c...