Network Security

I'm running the FMC with two leaf domains, each domain containing an HA Pair of FTD devices. I seem to be unable to use the FTD devices to collect host information.Example: I create an NMAP Scanner instance that uses the an FTD (active or failover) t...

We want to enable Jumbo frames on ASA 5585-X and our last attempt caused an outage.Below are cmd excuted in our last attempt.jumbo frame-reservationsysopt connection tcpmss 9096mtu was set to 9216 on interface Trust and DMZTwo interface on the ASA is...

I have a HA cluster of FTD (Active/Standby). On FMC, the monitoring is complaining failures in screenshot below for the Standby FTD. Everything is healthy on the Active primary FTD and FMC... I do not see any blockings or DNS issues...Any suggestions...

Hello, Our client is requesting to block all outgoing traffic through 2000 IP adresses presented on a csv file. I'm wondering if there is a way to import this file into the ASA and use it in a firewall rule. Best regards,

Dear TeamI have a Cisco IPS 4720. After joining my organization have not received the password of the Cisco IPS 4720 from my senior. He is telling that he forgot the same. Kindly help me in recovering the password. 

Hello I would like to ask what certificate the CSM uses in order to communicate with the managed ASA. I am referring to the thumbprint it shows in device properties.  Is it related to the identity certificates in Certificate management or is another ...

Hi, I have some question regarding VPN created on ASA 5506 with Firepower services: - Why with this setting Send NTLMv2 response only. Refuse LM & NTLM end user can't connect at VPN through Radius Server ?   When putt lower security layer it's workin...

Lets take this scenario: A workstation gets IP via DHCP, say 10.1.1.1.A host profile is built for this workstation.Now this user disconnects his workstation from the network.Another user gets this same IP 10.1.1.1 via DHCP What will happen to the hos...

Hello team,  We have multiple ASAv registered with smart licensing and working perfectly. But, each time we make a change to the VM parameters, the asav gets unlicensed with a warning"there's no active ASAv platform license installed'.Once we push ag...

Hi All    I have TrustSec between two SGTs to deny SNMP 161 and 162. I see the SGACLs hits and it's denied. but the snmp port still showing in the port scan.  is this normal? it's just the ports showing in the scans ONLY.  I can't get any SNMP query....

I'm trying to setup email encryption and we use Barracuda Email Security Gateway. It appears outbound encrypted emails are not going through because of ESMTP on Firepower. Is there a workaround instead of disabling it completely?

Hi all, I'd like know where can I quickly check failover event log in FMC to verify active/passive firewall failover and failback state. Thanks for your help.

We have a problem where the source IP is in the internal network and the destination in the VPN. Source IP is sending multiple requests on several different ports to destination IP.We remove the source IP from DHCP so that no one can receive an addre...