Network Security

I have a group of Firepower 2100 devices all in a HA pair and have noticed this similar issue with each pair after upgrading. We were on code 6.2.3, and then performed upgrade path to 6.4 then to 6.4.0.9 All of this goes well however after some time ...

Besides VPN and Leased line Is there anything else besides this​ to prove the security?

I am having an issue with Connect my two Nexus Core switches to Firepower 2110 in HA. I have connectivity to the active firewall but I am not sure how I connect the standby firepower to the nexus switches. I different options ( L3 ports or VPC) and a...

I have an Older Cisco ASA 5585-X Firewall that I tried to upgrade the IOS. After reload I did a Show Boot and that is showing the New IOS. When I do a Show Version  it shows that it is running the Old IOS. I also looked at the Configuration Registry ...

Hi I just want to find out if this is normal as it is a pain to the troubleshoot devices that hits my deny policy as every Dot1x sessions has a MAB failed session then a Dot1x session permit session.  My switch config does specify to use Dotx1 first ...

I have done a bunch of researching and I have tried some troubleshooting when the problem occurs but I'm just coming up empty-handed.  This is really frustrating my family and myself. We have TimeWarner cable.  From the Motorola cable modem I go rig...

Hello, While migrating ACLs from old ASA to new FTD managed by FMC I came across this situation.Network administrator were using 255.255.0.255 mask to cover 1st, 2nd and 4th octet and let 3rd octet be flexible in ACLs to be used with for example this...

Hi I have an issue with Allowing traffic to Office 365 through our Cisco ASA 5525-X firewall using O365 FQDNs. We have an internal vlan that needs to use O365 for emails.  I have allowed traffic on the following ports but the traffic is being blocke...

HiNew to firepower api.   Any tips on creating scripts?Can you give an example of API with1. adding a new ACL2. Removing an existing ACL3. Adding an object (like ip address)I already have these items in excel. Ideally, there would be a process to sav...

Hi,   I've been developing a lab of integrating FTD and FMC with an Active Directory to test Passive and Active Authentication. With Passive it works like a charm, I applied several policies like URL and Application filtering to users authenticated b...

Hi all, i've recently set up cisco anyconnect on a cisco5525X appliance running ver9.14(1)10, i'm using radius via Cisco ISE v2.7 which is connecting to active directory I've come to configure password resets for users with expired passwords, I have ...

Dear Cisco professionals I was wondering if my Firepower system is running with a recommended versioni am currently running 1-    FMC upgraded to version 6.4.0.72-    VDB upgraded to version 3373-    SRU upgraded to version 2.9.14.64-    GeoDB upgrad...

Hi all, I've got a problem with DNS requests (IPv4 and IPv6) through our ASA.A windows clients asking the DNS Server for the IPv4 Adress of a internal hostname.At the same time (within milliseconds) the clients sends another DNS query to the DNS serv...