Network Security

Hello, We are planning to deploy a pair of FTD appliances for one of our customer. We will be running routed mode and will use inline sets for the connectivity. The customer wants to configure SSL decryption for both inbound (for published services) ...

Hello Guys,  Does anyone tried to make conditional NAT between different VRFs and is it even supported in IOS ?  

Hi,   I need to change the management IP of both FTD running in HA and FMC will be the same.   Please suggest how to do it best way, as after de-registering from previously IP from FMC, we need to re-register to FMC with new IP.

Hello All,We have added FTD into FMC Device management. There is no Data being shown in FMC Dashboard. Could you please let us know how to get Data (Users/ Activity/ Active sessions) in our Dashboard.Your help will be very useful to us to analyze the...

Hello team, I am trying to pass one GRE tunnel over two Cisco Firepower 1120 Theat Defense version 7.3.1-19 working as active/stand by. The devices are stand alone and those are not working or manged by FMC. How can I assure the traffic can be allowe...

Hi,i tried to get a grip of cisco's semgentation solutions. i'm a bit overwhelmed by the information and don't know what to make of it. could someone please explain to me in simple words what trustsec and secure workload are and what their primary us...

I need to test to see If I'm still mapped to the Vlan after having removed the AAA mapping for the AD group I am mapped to. Ill verify the AD group used to map to ASA group Policy. Where do I go in ASDM to remove the AAA mapping for the AD group I am...

Hello,I am trying to connect to Firepower through our web gui and I keep getting a time out. I was unable to access our FMC to restart because our CPU was at 100%. So after adding more memory that fixed that issue but after restarting services I am s...

I have a couple other posts on this topic for ISE and FMC, but have decided to split them up so not to mix up answers for the different technologies.The server team will be replacing the existing AD servers with new ones shortly.  The new servers hav...

Hello all, I have an issue regarding traceroute result "time out" passing through ASA to outside (public). I have two public ip addresses at ASA, one is assigned at outside interface which translate (NAT) for some networks (192.x.x.x/24). Another one...

Hello guys I need your help, I already have my firewall configured, but when in my Google browser (firefox, chrome and microsoft edge) I write my ip that I configured in the interface and connect with an ethernet cable, it does not respond. In the CM...

Hello Team,When it comes to shared services blocks like WLC, ISE, DNAC, and DHCP, do you typically deploy them behind the data center firewall in the data center block for an extra layer of security, or do you prefer to place them on the core side of...