Network Security

Community! Currently building a dashboards for Splunk so that my security team can start auditing important events.  I have been tasked to start on the Networking side until our team can finish Linux/Windows dashboards.  While I am somewhat familiar ...

I have FMC 6.6, FTD 6.5 and ISE 2.7. FMC is connected to ISE via pxGrid and I see the User-to-IP mapping in the FMC: Analysis > Users shows user jbeam with an IP of 192.168.131.11 and an active session count of 1. I have a single identity policy mapp...

Hello, we have an ASA 5525-X that is reimaged on FTD version 6.2.3. we restore configuration of FMC and after that the Firewall block all traffic, when we run a Packet tracer we found that the block is due to SNORT. but the SNORT isn't actived on our...

Hello everybody, our customer uses a Firepower 2101 running a ASA OS 9.10(1)44 and has many Dynamic Access Policies (DAC) for their business partners. He created a new AD Group and a new DAC and specifies a new Group Policy for this new business part...

Hi, The secondary MnT node is not visible from the Operational Data Purging page.From deployment page it is shown and there is no issues found.What could be the reason?

Hi,I have an ASA5585-SSP-20 where I see a lot of overruns on the Internal-Data0/1 interface.This is an active/standby setup.None of the physical interfaces experience overruns, and the CPU, memory and other stuffs seems fine.Interface Internal-Data0/...

Hi, I have an ASA 5585-x in a failover setup and I am looking at the interface counters. On one of the 1 gig interfaces the total transmitted bandwidth seems to be 390MB/s but how is that possible on a 1G interface? GigabitEthernet0/1: receiv...

Hello,Is there a way to Copy , Extract and export the Rule Set from a Policy. I am using FMC 4000 for reference. 

Hello,I have configured rate based attacks on Network Analysis to prevent a server from DoS attacks and it works fine. Now i have to fine tune the policy and need to know how many established connections/sessions are there per source IP address. On t...

We have a fpr-2120 that is Asa code at(information is down below). FCM is not able to find this FPR-2120. What do I need to get FCM to find FPR-2120      Cisco Adaptive Security Appliance Software Version 9.14(1)SSP Operating System Version 2.8(1.105...

Our external interface (1/1), is bouncing/disconnecting. How can I monitor the interface through the CLI to look for errors?I have run the "show interface g1/1 stats" (and other options), but I don't see CRC errors, or other errors.-newbiftd

Hello Everyone,I am new in using ASDM for Cisco ASA 5510.I want to block certian websites from my LAN.Can anyone tell me how to do that using ASDM ?Thank you...