Network Security

Hello everyoneI'm trying to migrate a QoS configuration from cisco ASA 9.8.4 to FTD 6.6.1 (using FDM or FMC ).The issue is about the ACL for QoS match is using a time-range and that point is very important for the migration.1- In FMC I checked the Qo...

Hi there, I have been trying to implement DSCP filtering on a ASA 5506-X, using class maps.  But have not been able to get it configured and working.  It seems that the commands to do it are there, but looking at general DSCP filtering examples, I'm ...

Do the Firepower appliances have the ability to show the L7 apps used by a rule similar to Palo Alto's Usage feature? From what I've found, the only way to see the app used by a rule is to check the event explorer and filter on the rule name. This us...

Dears I have allowed to access a websever on HTTPS port onlythe problem is  when a client tries to access HTTPS , firepower will allow client to access webserver and in event viewer will show ClientIP:sourceport to WebServer:443 allowed  but the prob...

Hi Guys,I am just wondering where is the best placement for a firewall doing an SSL decryption? If I have a multi-tier firewall in the network, tier-1 which is facing outside network will definitely needs SSL decryption but how about internal firewal...

Hi all,   Possibly posted in the wrong place but after some advice please.    We have Cisco Prime infrastructure 3.1 and we have added our ASA's to it (5555-x and 5585-x). I have read that these devices are supported but it does't say to what degree....

I have number of servers with Redis Pipeline (redis.io/topics/pipelining) enabled. A FTD is managing routing access between servers like this:Redis client --->FTD--->Redis Servers192.168.2.10/24-->192.168.70.33/24192.168.2.10/24-->192.168.70.34/24192...

I am about to uprade two FTD 4110 FXOS. The first upgrade has been succeced on the Secondary and then I tried do run the same steps on the primery FTD. I has been runing upgrade in more than 2 hours on the primery FTD now and I am soure that some thi...

Hello everyone, I am currently in the process of rolling out Dot1x in a small classified network. The network has the following: (12) Windows 10 Machines using native supplicant software(1) Cisco C9300 acting as the authenticator(1) Cisco ISE acting ...

Hello Dears  Why does some traffic is blocked in firepower for example from 2.2.2.2:3344 to 10.1.1.10:443 is allowed while response back from   10.1.1.10:443 to 2.2.2.2:3344 I only allowed traffic from public (2.2.2.2) to reach 10.1.1.10 on port 443 ...