Network Security

Hi,We have a customer inquiring if their Firepower VM appliance is impacted by CVE-2021-4034 vulnerability. It seem to be related to VMware.  Can anyone provide any information for this?  Unable to locate anything for the FMC. Any direction would be ...

Thanks to @Rob Ingram for pointing me to this LINK the other day. That said, I'm confused with Step 8 forward. Specifically, if I'm going to manage the FTD via a data interface (outside interface in this case), why would I care about the management i...

Can a Cisco ASA5525X do MSDP and if so is there a configuration document?

Hallo, i have Cisco ASA 5515, and its Eol and EoS is on 2.Aug 2022, because of that i wanna go to new appliance from Cisco. I checked in Cisco but they said that there is no replacement for this product. What i can do with it?!!!! https://www.cisco.c...

Hi everybody I have operate Cisco asa 5506 with aaa settings. I use linux tac_plus server.It semms to be work well, but very slow. If I stop tacacs server the login stop inmedietly  with tacacs user, and I can login with local user. Nice.If I start a...

Hi, We know that Cisco supports anyconnect over SAML, but does OAuth also supported? If yes, how to confiurate it on cisco asa. I dont see any as such config document. Please need a quick response.  Thanks in advance.   

After reading the NGFW Policy Order of Operations guide here, https://www.cisco.com/c/dam/en/us/td/docs/security/firepower/Self-Help/NGFW_Policy_Order_of_Operations.pdfI am even more confused about how the firepower device processes rules. According ...

I have FMC 7.1 and want to reduce my ACL. When I tried to add a network with a wildcard mask of 0.0.255.63 to the list of network objects, I got the error "Invalid IP Address". At the same time, a network with a wildcard mask of 255.255.0.63 is creat...

Hi, I just currently got a scenario that two ASA with perpetual RA license, is it possible to transfer onto new FTD 1140 with new smart account?

hello ,i have a Cisco 5525 with firepower , i've added it to my FMC .and every time i add a new access policy and hit save and deploy i can't edit it anymore and i can't place another rule above it .i can only view the settings of the rule.i can't de...

Hi,we're in the process of implementing TACACS+ AAA on our routers, during the process, the security team noticed that on IOS-XR the only option to encrypt such a key is type 7 which, is easily reversed. I've followed this up with TAC and the enginee...

Good day, I can't really get any further.We have set up both an acl and custom attributes for dynamic tunnel exclusions.In order to reach the local VM on the host, we have stored a private 172 IP range inside our acl for the tunnel exclusion.Unfortun...