Network Security

FTD 6.6.5 We've got a "Block" ACL based on source networks that's somehow being bypassed, but only for a single group of source networks in the ACL. Support tech couldn't find any explanation, and suggested we run a system support trace. The only pro...

It stacks at loading Firepower configuration 17%. ``` $ javaws startup.jnlp selected jre: /usr/lib/jvm/java-8-openjdk-amd64/jre Unable to use Firefox's proxy settings. Using "DIRECT" as proxy type. selected jre: /usr/lib/jvm/java-8-openjdk-amd64/jr...

Hi guys, So I am trying to generate a report that can show all intusion on the log4j that has been blocked, but I have a hard time figuring it out how to make the report.Has anybody made a report that can show me the info here?   Hope someone can hel...

I have an ASA-5516 X that is running:1)adaptive security appliance software version 9.8(2)2)Firepower extensible operating system version 2.2(2.52)3)Device manager 8.7(2)Can all three be upgraded?Is there a recommended upgrade path?Thank you in advan...

Hello,Is it necessary to assign standby IP for BVI on FTD in transparent mode for HA purposes? The screenshot from FMC is attached. Thank you in advance!    

We have 2 wan links on the Firepower 1010 both are pppoe. We want to use wan as below no failover is required.wan 1 for subnet 172.16.100.0/24 + 172.16.50.0/24wan 2 for subnet 172.16.150.0/24is it possible? as we can not set next hop IP in the route ...

I have a problem with this ASA. Cannot reach from the outside the inside network. Logs like that A-3-710003: TCP access denied by ACL from 203.1.1.4/51022 to outside:10.0.0.3/443%ASA-7-710005: TCP request discarded from 203.1.1.4/51022 to outside:10....

We use syslog traps to notice and alert on VPN logins.  I found out today that when we upgraded from 9.14.2.1 to 9.14.3.1 as part of remediation for some security issue, that we stopped receiving traps.  We also just went to 9.14.3.15 for yet another...

Hello, A customer considers purchasing a FPR to be used in an airgapped environment and needs to use PLR. How is that unit then updated? Any presenation available on this? BR Andreas

Novice Here, Occasionally, my asa's will failover to seconday/active. Im able to fail them back to primary/active with no issues.I need help figuring out what is causing the failover. Is there a log anywhere I can troubleshoot with to signify an issu...

After a lot of trial and error, I am coming to the conclusion that in order to leverage my existing internal Radius/NPS/AD + DUO Auth Proxy configuration for AnyConnect users, I need an ASA.Today I have an RV345P configured. WIN and OSX users connect...

Hi.I'm looking for any best practices for implementing a SSL Policy Exception Rule.LAN -> Internet is using a generic Decrypt-Resign all HTTPS sessions.And i'm trying to add an exception as Windows update clients and WSUS are both complaining about b...