Network Security

Hi, I have a Firepower appliance running ASA, where I have many different vlans. Most of them do not have any access to the internet or other vlan.I have enabled an NTP proxy server on one of the VLANs, and wish to distribute this to my hosts on othe...

We are deploying a pair of NGFW's in Azure.  I have them deployed and managed by a FMC in Azure.  The issue that I am having is the 2 data interfaces on each FW show disabled.  I have enabled them through the FMC but they still show disabled.  If I S...

HI all, I've migrated a few ASAs to FMC managed FTDs using Firepower Migration Tool, using both ver2.4 and ver2.4.1It's a handy tool so that we don't have to create objects and rules from scratch, but obviously not perfect.We have outbound rules whic...

Hello team We have few servers in DMZ that need to be accessed from public via http however we want to have HTTPS traffic between public clients and FTD and then between FTD and DMZ server it would be plain HTTP since server doesn't support HTTPS bec...

Dear membersI'm upgrading a pair of ASA5510 from 8.4.1 to 8.4.6 using the strategy of 0 downtime, upgrading the Stanby ASA first and switching it to active.After switch the ASA5510 version 8.4.6, the outside acl seems to stop working.I open the debug...

Community! Currently building a dashboards for Splunk so that my security team can start auditing important events.  I have been tasked to start on the Networking side until our team can finish Linux/Windows dashboards.  While I am somewhat familiar ...

I have FMC 6.6, FTD 6.5 and ISE 2.7. FMC is connected to ISE via pxGrid and I see the User-to-IP mapping in the FMC: Analysis > Users shows user jbeam with an IP of 192.168.131.11 and an active session count of 1. I have a single identity policy mapp...

Hello, we have an ASA 5525-X that is reimaged on FTD version 6.2.3. we restore configuration of FMC and after that the Firewall block all traffic, when we run a Packet tracer we found that the block is due to SNORT. but the SNORT isn't actived on our...

Hello everybody, our customer uses a Firepower 2101 running a ASA OS 9.10(1)44 and has many Dynamic Access Policies (DAC) for their business partners. He created a new AD Group and a new DAC and specifies a new Group Policy for this new business part...

Hi, The secondary MnT node is not visible from the Operational Data Purging page.From deployment page it is shown and there is no issues found.What could be the reason?

Hi,I have an ASA5585-SSP-20 where I see a lot of overruns on the Internal-Data0/1 interface.This is an active/standby setup.None of the physical interfaces experience overruns, and the CPU, memory and other stuffs seems fine.Interface Internal-Data0/...