Network Security

My current 5516-X pair is acting as internet border, AnyConnect VPN headend, and IPSec VPN concentrator. Looking at converting to an FPR-1100 pair. If these are the only FW pair using FTD software, do I need the FMC software? Also, are there any guid...

Dear Community,We have IPS (Inspection) enabled on several of our rules in our Access Control Policy. Eventhough we can see the intrusion events in Analysis -> Intrusions-> Events, we do not see any of these intrusion events in our syslog files. I wa...

Hi guys, recently my logs from Firepower are filled with msg:  %FTD-4-419002: Duplicate TCP SYN from outside-x.x.x.x/xx to nlp_int_tap:(MY STATIC IP-from ISP/443) with different initial sequence number.So outside IPs and ports are random, i was readi...

Hello Expert, We are seeing some issue with Office 365 traffic ( outlook, share-point, one-drive and Team etc), We are overloading the traffic on outlook interface and routing the traffic directly to ISP.We observed the issue mainly in peak hours.We ...

Dear team,I have Checkpoint firewall for my DC and i am planning to deploy Cisco Firepower 2130 ASA for my DR .I would to replicate the same configuration on Checkpoint firewall to the Cisco ASA firewall.what tool can convert this best and what do i ...

the failover is working,

Hi everyone,I'm wrapping up an assignment for my networking class. For the assignment I have to build a VPN tunnel between two ASA 5505s. I've managed to do this, but have a very strange problem. Every time I close and reopen my topology in packet tr...

Hi all!  Hoping one of you can shed some light before I tear out what remains of my hair (not much, but I value it!) Have a Cisco ASA running 9.2.  From factory reset did a quick configuration to test since I'm used to the old school PIX units and kn...

 Hi ,I don't have a physical switch for dmz .Now If I want to  share the same  inside network switch ,what is the solution Thanks    

In Firepower managed by FTD ,  the secondary fails a policy push

Hello , in our clients monitoring tool we see these message , Interface Internal-Data0/0(): High error rate...... The devices are FTD's 1150 in HA mode . I understand that this interface is internal to the device and move traffic into and out of CPU ...

I'm upgrading an old (OLD) Cisco PIX to a newer ASA unit.  Of course when I migrated the config (via CLI), it didn't like some of the old NAT commands and I had to modify appropriately.  I have 2 interfaces configured (inside 100 and outside 0).  I h...