Network Security

HI all, I've migrated a few ASAs to FMC managed FTDs using Firepower Migration Tool, using both ver2.4 and ver2.4.1It's a handy tool so that we don't have to create objects and rules from scratch, but obviously not perfect.We have outbound rules whic...

Hello team We have few servers in DMZ that need to be accessed from public via http however we want to have HTTPS traffic between public clients and FTD and then between FTD and DMZ server it would be plain HTTP since server doesn't support HTTPS bec...

Dear membersI'm upgrading a pair of ASA5510 from 8.4.1 to 8.4.6 using the strategy of 0 downtime, upgrading the Stanby ASA first and switching it to active.After switch the ASA5510 version 8.4.6, the outside acl seems to stop working.I open the debug...

Community! Currently building a dashboards for Splunk so that my security team can start auditing important events.  I have been tasked to start on the Networking side until our team can finish Linux/Windows dashboards.  While I am somewhat familiar ...

I have FMC 6.6, FTD 6.5 and ISE 2.7. FMC is connected to ISE via pxGrid and I see the User-to-IP mapping in the FMC: Analysis > Users shows user jbeam with an IP of 192.168.131.11 and an active session count of 1. I have a single identity policy mapp...

Hello, we have an ASA 5525-X that is reimaged on FTD version 6.2.3. we restore configuration of FMC and after that the Firewall block all traffic, when we run a Packet tracer we found that the block is due to SNORT. but the SNORT isn't actived on our...

Hello everybody, our customer uses a Firepower 2101 running a ASA OS 9.10(1)44 and has many Dynamic Access Policies (DAC) for their business partners. He created a new AD Group and a new DAC and specifies a new Group Policy for this new business part...

Hi, The secondary MnT node is not visible from the Operational Data Purging page.From deployment page it is shown and there is no issues found.What could be the reason?

Hi,I have an ASA5585-SSP-20 where I see a lot of overruns on the Internal-Data0/1 interface.This is an active/standby setup.None of the physical interfaces experience overruns, and the CPU, memory and other stuffs seems fine.Interface Internal-Data0/...

Hi, I have an ASA 5585-x in a failover setup and I am looking at the interface counters. On one of the 1 gig interfaces the total transmitted bandwidth seems to be 390MB/s but how is that possible on a 1G interface? GigabitEthernet0/1: received (in 1...

Hello,Is there a way to Copy , Extract and export the Rule Set from a Policy. I am using FMC 4000 for reference. 

Hello,I have configured rate based attacks on Network Analysis to prevent a server from DoS attacks and it works fine. Now i have to fine tune the policy and need to know how many established connections/sessions are there per source IP address. On t...