Network Security

I'm looking at creating a restricted subnet. I want all nodes and devices on the subnet restricted from accessing each other. So for instance, node 1 can't speak to node 2 and so on. Is this possible?

Hi, I have to block internet navigation and windows update to several windows client, the problem is that they have a local CRM (in the same LAN). This CRM works on web and on login it has several components that goes on internet (like youtube or goo...

Hello everybody,a customer reported that AnyConnect users will be disconnected sporadicallyand will be prompted to login again but this time without success.When they retriy this he get a new VPN session.But the  ASA consider the session still active...

Good evening, a simple question.Is there a match between ports (UDP-TCP) and applications in the FMC?In the case of a policy configuration I would like to use applications instead of ports but I am in the situation of not being able to find any appli...

Hi Friends, I need to recovery ISE CLI Password. I want to know following details1. While creating new CLI password can i use special character ?2. How to do the failover, which device failover need to execute the password recovery procedure ? Primar...

We have Firepower 1010 NGFW desktop appliances running firmware version 6.6.1-91. Recently and for no obvious reason, we have lost the option to register with the EU CDO instance. It was there originally because that's how we set them up, but now the...

Hi,We have a Active/Standby HA ASA with 2 Firepower 2130 in appliance mode.We use the Management interface as management-only and several interfaces.We have a default route on the management interface and a default route on an external interface. Whi...

You would think by now Cisco would allow you to enter CIDR searching when doing a capture.  I can use less than a /24 when using (0) as the last octet, but no where else.  In today's firewalls why can't the searches be allowed using the full capabili...

All:   Has anyone deployed PTP on an ISA3000? P2P or Transparent mode both supported?  Which PTP Profiles are supported?   If you have access to an ISA-3000, can you share various "show PTP", etc., command outputs? or "ptp ?" output from global confi...

We have a requirement to collect messages from cisco ASA where the Severity is Warnings (Severity 4, 3, 2,1, 0).  The client ASA is configured as such:  ca-edge-fw# show run all logging logging enable logging timestamp logging hide username logging b...