Network Security

Resolved! Native Vlan - Double tagging attack

Hello everyoneI would like a clarification on the native vlan.By default a vlan is used, for example 99 as a native vlan without assigning any access port to avoid double tagging attacks.What is not clear to me is:1) Why do I have to set as a native ...

Resolved! What are the steps to properly shutdown FTD ASA5555-X HA Pair

Hello. We have a pair of FTD on ASA5525-X running in an Active / Standby pair managed by FMC. What are the step by step sequence (or commands) for shutting down both units as this will be my first time having to go through this process. And I assume ...

Site-to-Site VPN Between Two FTD 2130's Running Slow

Hello, I have a S2S VPN set up between our 2130's and we seem to be having some serious speed constraints over one of the tunnels. I read in another post somewhere that the FTD's may have a speed per SA limit, but I have not been able to find any of...

Cisco FMC High Availability and AMP Private Cloud Integration

Hello,We have two data centers, Primary site (DC1) and DR site (DC2). In each data center we have one FMC (hardware) and two FTD appliances.I have configured HA between the FMCs (where the primary FMC resides in DC1) and the FTDs at each data center...

ASA-2-106016 on same interface, but two subnets

Hi,I get a strange problem here. We got another subnet from our ISP because we needed another block of IPs. Everything works fine, except one thing: Deny IP spoof from (XXX.XXX.XXX.XXX) to XXX.XXX.XXX.XXX on interface outsideThe source IP is our mai...

Cisco FMX API 6.6.0 - adding member to existing object group

I am running FMC 6.6.0 API, adding a new member to an object group it wipes out all other existing member!Would anyone know how to use PUT just to add a member and keep what exists?Thanks

Backup solution for FTD instances on Firepower and FTDv

Hi, I am looking for backup solution for FTD instance on Firepower device. we are deploying 2 instance of FTD on Firepower device. We are also deploying FTDv in our environment. We are using FMCv on KVM to manage these FTD devices. FMCv doesn't suppo...

Resolved! Shunned

Hi,I have a server having ip address 172.21.X.X, and it is always getting shunned. I have to manually clear the shuna everytime. Why the server is getting blocked at shun, i am unable to understand ? I can bypass the server adress at shun, but that's...

Access-List help required

Hi I need some help in creating that ACL on Cisco multilayer switch. 1) I want to allow all traffic between these subnets10.75.0.0/22 ------ 10.0.0.0/8 2)) I want to allow only http traffic and block the remaining traffic between the following subnet...

CISCO ASR Firewall Session table protection

Hello, I would like to protect our ASR router (connected to the ISP and the internal network) from Firewall session table flood attacks by configuring Firewall Session table protection. One of the restrictions I found here is https://contenthub.cisco...

Resolved! ASA - LAN dont recieve internet - possible NAT issue

HelloPlease here iam running with my ASA5606-x Firepower. Unfortunatly me LAN side arnt possible to reach the (ISP) Internet. Ping inside the LAN are possible also ping the firewall are ok. i think the configuration are mede simple g1/1 WAN - Outside...

AnyConnect disconnects network connection at when I connect to the client

I just setup a new ASAv in Azure and was testing AnyConnect. I can login find but once the connection is established, it disconnects my network connection. I thought maybe it was just my computer so I had someone else try it and the same thing happen...

How to use a VPN alternative connection as management path

Hi all,Some weeks ago I got help in this community regarding a management access configuration for my ASA and I got advise from @Marius Gunnerud which I'm trying to follow here. I got an ASA 5508, connected to AWS cloud via AWS direct connect, whic...

Resolved! Does Snort have the ability to detect transfer of sensitive information?

Wondering if Snort (running on our FTD appliances) has the ability to detect transfers of personal information such as credit card info or social security numbers, etc.

Resolved! ASA Routing from outside to sub-interfaces

I am adding a new ASA for a new segment on the network. the current existing network (10.10.0.0/16) should be able to access this Test segment. Here is my scenario: switch(L2)---trunk----ASA----L3link----ExistingL3Switch(with 10.10.0.0/16) on ASA I...

Network Security

Forum Posts

Resolved! Native Vlan - Double tagging attack

Resolved! What are the steps to properly shutdown FTD ASA5555-X HA Pair

Site-to-Site VPN Between Two FTD 2130's Running Slow

Cisco FMC High Availability and AMP Private Cloud Integration

ASA-2-106016 on same interface, but two subnets

Cisco FMX API 6.6.0 - adding member to existing object group

Backup solution for FTD instances on Firepower and FTDv

Resolved! Shunned

Access-List help required

CISCO ASR Firewall Session table protection

Resolved! ASA - LAN dont recieve internet - possible NAT issue

AnyConnect disconnects network connection at when I connect to the client

How to use a VPN alternative connection as management path

Resolved! Does Snort have the ability to detect transfer of sensitive information?

Resolved! ASA Routing from outside to sub-interfaces

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Cisco IPS & Symantec ATP CAS - Oracle Java

Question on S2S Tunnel to Azure using FTD or Azure Native S2S

Setting out TCP MSS on FTD only for non-ipsec endpoints

Cisco Stealthwatch ipfix exporter

FTD Configuration Resource Utilization

Emergency Reset Appliance

Cisco 2130 FPR Upgrade

FTD issue with Anyconnect authenticating via AD

Windows Directory Rule on FMC

VPN failing to come up following migration..