Network Security

Hi Everyone , I would like to know ASA firewall can make rule policy source-ip or destination-ip with naming URL or can define object group for URL example object network Ahost test.local access-list Test extended permit tcp host x.x.x.x  object-grou...

Hello, My primary asa has become standby and the secondary has become active.How to get the primary back to active and vice versa?

Hi Everyone, I am still confused with the answers. Can anyone help me to answer the question and tell me why please?  Cheers,Gordon 

Hi Everyone, Can anyone answer this question and tell me why please? why option 1 is not corret? Thanks,Gordon

Hello Everyone, I have a FTD pair in HA with active standby configuration. Both peer are connected to DC switches using VPC. A direct failover and staelink is connected between both peers. We do not have any data interface monitored or standby ip con...

Hi all!    New to FTD...    On other firewalls I've worked on, you could set up a "virtual" IP on the firewall itself that it could then NAT to hosts behind the firewall.  I know where to set up the NAT rules using FMC, but where do we set the additi...

Hi All, We have two Cisco FTD device ( manage by on-box means FDM) connected to 3 ISP setup on WAN side namely TCL, Airtel & Jio .TCL link is used for Site to Site VPN and Internet access.Currently all traffic is routed through TCL link. I need to ac...

Hello Community,I have a problem regarding one of my device, in this case the cisco Firepower 2110 appliance, i'm using it as my NAT device for nat to the internet. there's nothing big about the configuration, the configuration in my appliance is onl...

could someone please advise what the equivelant of show etherchannel summary is on FTD. on regular cli when I do show ? I cannot see any command to give me that details. by doning #show int port-channel .. I only get the satus which is up. 

Hey I m new to network security. Need to design below setup. Advise how will I achieve thisI have partner connected to network.  I want my hosts in DMZ via RDP from GRN able to access the services . Also any antivirus update or patches needs to be up...

We have Site to Site VPN setup between few servers to a vendor. However seems all traffic including these servers internet destined traffic is also passing through the S2S VPN. How should I exempt internet traffic from S2S VPN

Hi All, Need to configure below password policy on my live Cisco Asa. Need to know will i lose the accessibility of my device anyhow after configuring the password policy. Also what are the precaution i should take before executing the command • Step...

We setup our FMC (6.4) to be a Pxgrid subscriber to Cisco ISE. ISE has several agents inastalled to retrieve user-to-ip mappings. I can't seem to find any information about how often:1/ ISE pushes user to ip mappings to the FMC2/ How does an FTD retr...