Doing a bunch of testing with FMC/FTD and came across this article talking about inspection of packets that pass before traffic is identified. I'm testing this with ftp. My policy is very simple (picture attached). The traffic in question will hit...
Please remove.
Hi Folks, I have challenges after a software upgrade executed on my Cisco FDM (ASA5555-x) to a latest Hotfix 6.6.5.1 from Version before upgrade: 6.2.3Immediately after upgrade my internal networks drops, and i observed all internal static routes are...
hello,I have ASA 5515-X with a firepower module. What is the best practice to install an FTD image on ASA or install a firepower module?
Hello,so I got free of charge cisco 4331I configured for internet access from my LANbut I'm facing difficulty whit ZBF I cannot find a way to secure my LAN from outsideIf I run port scan whit nmap on my wan IP all ports are showing up closed and not ...
Hello, Everyone. I want to create Internal CA for SSL Decryption. And I generate a CSR, then I request a certificate on Third Party CA. After that I downloaded the Certificate and will install it on Iinternal CA. But, when I want to upload a signed C...
Hello,I am trying to setup a FMC 1600 appliance and have been told it's connected to it's serial port via a serial console server.However, when I log into the cli, I get the following prompt: FMC cli->I cannot type anything in there (I've tried ?, he...
Hi, I am trying to install ASAv on my Vcenter server. OVF Template is deployed successfully but when i start the ASAv VM it goes through the Initial checks and then keeps on rebooting. I have tried 9.6, 9.5 and 9.4 but same behaviour. I have attached...
If official devices are registered thru MAC & IP to access the LAN. How can we deal with MAC & IP spoofing. Anyone can bring its home laptop or mobile and put the allowed MAC or IP on his home device to access the secure network. How can we deal with...
I need to renew our Portal Certificate on ISE 2.6. I have begun the process of filling out the signing request and selected Portal for the certificates use. My question is about the Portal Group Tag. The current cert is using the " Default Portal ...
Hello!Cisco Adaptive Security Appliance (ASAI'm a newbie in Cisco's PT. I'm trying to configure and enable the firewall in a wireless router's GUI, but for some Cisco Adaptive Security Appliance (ASA)reason, the SPI Firewall Protection buttons are no...
I was browsing Cisco's web site looking specifically for SSL/TLS decryption specs for 1000 and 2100 FTD devices when I ran into something I did not expect. According to the site (see attached files) the 2100 family has better specs pretty much acros...
Hi Guys, I configured some users in my ASA FW but I have an issue with the password which is still shown in plain text with a "sh run" command. Do you have any idea how to fix this please? This is the line command used: username admin password "real ...
I have a ASA 5585x with SSP 40. Since it has an SSP 40 should the 10GE I/O perpetual? Is it going to expire? ciscoasa# ciscoasa# sh ver Cisco Adaptive Security Appliance Software Version 9.2(3) Device Manager Version 7.1(1)52 Compiled on Mon 15-Dec-1...
I have a mandatory rule to allow the Facebook application. However, I'm finding that often times this rule is permitting Facebook and anything else under the Sun. Exactly how do I narrow it down so that the rule is for Facebook and not just any rand...
