Network Security

We have a HA pair of FMCs (FMC3500) which have external authentication (LDAP) configured.There is one specific user which is not able to log on (using SSH) to the secondary FMC at all. There are a few users which can log on using GUI but SSH is worki...

We have two Cisco Firepower 4115s in active/standby mode, in a routed configuration. These have been running fine for a little over a year now. We currently run the ASA image (the previous firewall was a pair for ASA 5585Xs). Lately, we have been con...

I have configu a ip sla monitor on ASA 5545.just monior ASA sla status through zabbix.but i can't find the snmp oid of asa sla.i don't have any idea about how can i get the information

Hi all, I have setup a FTD appliance and would like to manage the 'inside' interface across the vpn tunnel (L2L) to the main DC where VPN RA tunnels terminate. I am using the inside interface as the route for management traffic and have all 0.0.0.0 a...

I have cisco Firepower 2100 I will purchase below licenses VPN , Web Filtering,  Threat, Malware, last one is FMC ( I have only two FP ) so is it required , is there any feature will provide ,is it a different appliance what is a difference between F...

Hi Experts, How do  I import a very huge Access-control Policy and a lot of objects, from SFR ASA5500x module with on-the-box management (ASDM) to Firepower Management Center FMC-ACP?What´s you recommendation? Thanks a lot for your response. Erick

howdy folks we're on 6.7.x branch and looking to skip up to 7.1.x lots of cool security add'l features floated about on their YouTube Cisco Secure Firewall channel how goes overall useage ....whats your favorite features and what's a 'sticking point'...

if I look at my public key on ASA it shows a size of 4096 Key name: <Default-RSA-Key>Usage: General Purpose KeyModulus Size (bits): 4096Storage: configKey Data: However an nmap scan keeps reporting the keysize as 1024 C:\WINDOWS\system32>nmap -sV --s...

After upgrading from 9.12 to 9.14(3), my ASA is not sending DHCP Discover packets out the interface configured. I see repeated attempts on "interface 2" (whatever that is) in the dhcpc debugs, but per packet captures on the interface, they are not ac...

Hello all,I have configured the FTD (FPR-1120)server, it is working fine. Unfortunately, I added wrong IP address in FTD server external interface. I want to change the IP access or delete but I could not change the IP address so how can I change or ...

Hi,We've had some problems with the FMC undefining objects on deploy randomly. Usually it removes existing time range objects, causing rules that use them to be active all the time.On deployment transcript the following lines can be seenFMC >> time-r...

I have what I think is a fairly straightforward configuration, though I cannot quite seem to get it working.  I need to have a few different DMZ hosts with PAT on a specific IP (that's not the ASA interface IP), where also if one of these hosts initi...

Hi all,  I am trying to create an Inline set on my FTD appliance and have some confusion.  I have included a basic diagram of my setup that I am trying to do.  I have a multi-layer switch (Switch1), Router1 and Router2.  The switch and the routers fo...

Hallo, i have a cisco switch WS-C2960S-24TS-L and its now EoL, and i want to update this Switch, which it is now inproduction enviremont.Is there any problem or bugs, if i update this switch?  Thanks