Network Security

Hi I have RV340 Dual WAN Router and my firmware and I had the IPS switched on in the following mode when the router firmware was at firmware:1.0.03.20 <ips xmlns="http://cisco.com/ns/ciscosb/ips"><enabled>true</enabled><mode>prevention</mode><level>s...

Need assistance in identifying logs on cisco FMC. we occasionally receive advisories for malicious dns communication from our network. for eg:source ip  dest ip                    app   signature     url 10.x.x.x    146.148.78.118      ssl     C2 con...

Hello to all,I am migrating from virtual FMC to FMC 1600 and sf-migration.pl script is taking way too long.My backup from virtual FMC is nearly 46GB. I copied the file to the FMC 1600 and executed the script. After nearly 24 hours has not finished ye...

Buenas Noches no tengo una consulta hace poco compramos unos Switches Cisco Business 350 series pero no me deja configurar VTP en un enlace de cisco que solo se puede configurar en referenciacatalyst me podrían confirmar por favor muchas gracias

Questionin my organization vtp mode is set to 1 all switches are in transparent mode. But my belief is it will be very beneficial if we use vtp v3. my organization is Service Provide, ISP with ISO standard. Please advise.    coresw1-kgo>enPassword:co...

HiIn ASA we can add a Global ACL which is applied to all interfaces is there a way to do this for FTD using FMC please.?? Thanks

I am no longer able to access ASDM. I have version 7.33. I have the IP in the Java exception list and the security level is set to medium. If I try to open ASDM from a browser I get a 404 error The first message I get is ASDM will start up using Java...

HI All, I have a issue about FTD 2140 at Inline IPS topology.I only have a ACP rule and source and destination are any.But when I execute show asp drop  command on FTD 2140, it display many acl-drop packet.So I execute command with capture asp-drop t...

Hi Team, please help us to migration of ASA EIGRP configuration to FTD configuration, below is ASA configuration.router eigrp 100network 10.10.10.0 255.255.254.0authentication key eigrp 111 ***** key-id 1authentication mode eigrp 100 md5access-list E...

Hi, we're trying to implement a new ftd 2120 in our network. It should replace an old ASA 5505(same ip-addresses). We've tried it last weekend, it worked so far but we had trouble with the traffic coming from a seperate vpn-gw in the DMZ to our proxy...

hi the ASA running with the transparent mode .our DHCP server is put in the outside ,and our client behind the inside interface. The problem is the PCs can't get the ip address use the DHCP. Because DHCP relay services are not available in transpare...

Hello all, I'm working on securing our network from TTL Expiry attacks.The reading I've done says I can use an ACL:ip access-list extended ACL-BLOCK-LOW-TTLdeny ip any any ttl lt 16permit ip any any!interface g/#/# ip access-group ACL-BLOCK-LOW-TTL i...

Hi All,I am hoping someone can help. Can NTP support SHA256 now? My Cisco portable command guide says only MD5, but I found some references to it on Cisco's site, but not when the change may have happened. Its possible my book is out of date. Many th...

Hello,   please does anyone have an idea, how FMC determines Hostname of any host in Host profiles? I cant find anything about it in admin guide. There is only written: if known.   Thank you   Best regards