Network Security

Hello,   please does anyone have an idea, how FMC determines Hostname of any host in Host profiles? I cant find anything about it in admin guide. There is only written: if known.   Thank you   Best regards

Hi Experts,We're trying to upgrade Anyconnect from 4.8 to 4.10 on Windows 10 machines via Force upgrade (placed the recent version in the top of the Remote Access VPN config under WebVPN on the ASA) and after the successful upgrade, we've received th...

Hi, I made an integration between FMC 7.0 and ISE3.0 through pxgrid. Connection works fine.Primary host:[INFO]: PXGrid v2 is enabled[INFO]: pxgrid 2.0: account activate succeeded[INFO]: Successful connection to ********:8910[INFO]: These ISE Services...

Hello I have an issue with ASA FW that is used for VPN purposes. I see a lot of dropped packets in two interfaces. The reason is ICMP Inspect seq num not matched (inspect-icmp-seq-num-not-matched) The source is a VIP of some servers and the dest are ...

Platform: single Firepower 4110 firewallCurrent FXOS Version: 2.7(1.106)Current FMC Version: 6.5.0.3-3Current FTD Version: 6.5.0.3-3 We're trying to upgrade FTD from 6.5.0.3-3 to 6.5.0.4-57. After attempting to install or push the 6.5.0.4-57 image we...

Dear Community,I had a question about interface monitoring for failover on the devices. I have a mix of port channels with sub-interfaces as well as individual interfaces. In terms of the port channels, should I be monitoring only the port channel or...

Hello im trying to establish an ipsec tunnel between 2 ASAs 8.4 with no luck, but i dont seem to find out what is missing Can someone check if my configuration ts ok? i SITE AObject-group network COMPANY-ANGNetwork-object 192.168.100.0 255.255.255.0N...

Hi, I did an inital setup of FTD in VMware but I can't seem to configure the IP and/or enable the interfaces in CLI. How do I enable and configure the IP through FTD CLI (I access this through VMware webconsole and not via SSH).

Hi, I've tryed to add a 5506-X device to FMC and to do this you need the IP and "Registration Key". I think the "Registration Key" is added when you do the inital setup but I never did that part. Is there any way change the Registration Key (or find ...

This question arises as a result of CVE-2021-1675, the MS print spooler vulnerability.  Is it possible to block access to a specific RPC service?  Can the dcerpc application inspection engine dig that deep?

Our remote warehouse keeps losing it's connection as the VPN idles out. A simple Packet-Tracer is enough to wake it back up,  but how do I stop it from idling out. I see that there is a Dead Connection Detection policy that can be configured but I do...

I have run vulnerability SCAN for few cisco devices & found this .. Let us know if you can help here. THREAT:Cisco IOS is a family of software used on most Cisco Systems routers and current Cisco network switches.There are several variants/code that ...