Network Security

Hi,   I've factory-reseted my Firepower 2130 and after that I can't connect to FTD from FXOS. I am able only to connect to local-mgmt:   firepower-2130# connect ? local-mgmt Connect to Local Management CLI These are outputs from ssa:   firepower-2130...

So I recently migrated a site from an 891 to an 1111-8P. But since then I have been unable to access a VOIP gateway in the ZBF DMZ on the router.I can ping the GW & log into it from the LAN locally and the NATed IP of the gateway shows in the ARP tab...

Hi,Deploying  VPN Client 4.9 version on new laptops need a silent installation instructions, The installation should install Core & VPNStart Before LoginVPN Posture (Hostscan)Diagnostics And Reporting ToolHow to install client with these features. Th...

You may receive the error message that the active peer already exists. To fix this you can ssh into your FMC device, locate the UUID by cd changing into /usr/local/sf/peers to see what peers exist. In my case only the IP address portion was there not...

Dear All, I am trying to apply Security Intelligence to FTD Access Control Policy via FMC.(And Using Evaluation License for now) When I add some category(ex. Network - Attackers, Phishing etc) to "Add to Block List" and mouse over to added one,it sho...

Hi Community, We've upgraded our Firewall ASA to 9.12.3, since then we've noticed a latency issue when reaching servers behind the IPsec Tunnels (no issue previously with 9.8 version). Do you have any idea regarding this issue? Can you advise on the ...

Our ASA-5525 is not fitting with the ASA-RAILS. We are having a problem trying to fit it into a 600mm deep rack.When fitted in place at the front we can not move the mount back far enough  to be able to fit the casing and pin in the holes.The Cisco w...

I have read some posts and command reference documents regarding "same-security-traffic permit inter-interface". There seems to be conflicting information when it is applied with the ACL as the behaviour might have changed over the years (not sure). ...

Hi,Got the mission to download software from Cisco.com called "cisco-sa-asaftd-ro-path-KJuQhB86".  Not able to find this anywere.... maybe it does not exist and I got the wrong information? Regards,Anders

Can we have failover on ASAv  , when both appliance are configured in different zone of amazon cloud?

Hi Experts,We've Cisco ASA with SFR modules being managed by FMC. Currently, we're using LDAP server as 'domain.com' which resolves to multiple AD servers and the port used is TCP/389.We've been asked to change it to secure LDAP-TCP/636 and in this c...

To all:   I am trying to configure FMC/FTD to use my clients internal DNS servers for guest wireless.  The interface for the guest wireless hangs off the FTD appliance and I have the policy built in FMC to allow DNS traffic from the guest wireless ne...