Network Security

We have a problem where the source IP is in the internal network and the destination in the VPN. Source IP is sending multiple requests on several different ports to destination IP.We remove the source IP from DHCP so that no one can receive an addre...

I use ISE for device administration. We have created Read Only and Read/Write command profiles. Read/Write level 15. for the read only we set the privilege level 3 and then restricted the commands that could be executed.the dir command was permitted ...

Hi there,We've got a standalone ASA 5525 which is connected to the core switch with single physical interface for the LAN and other for the Internet.Now, our ISP needs to change the IP address of the Internet link with a complete different range.So, ...

I would like to ask for assistance in determining what time of syslog events are being received by our syslog server:These are, I think Intrusion EventsDevice SFIMS: [1:43687:2] "INDICATOR-COMPROMISE Suspicious .top dns query" [Impact: Potentially Vu...

Hi I have a 1010 Firepower on the edge with 2 S2S VPN connections established on it.Now when I try to connect from a client inside of the 1010 to a VPN Gateway on the internet, it is not going through, any hints on where to troubleshoot? as these dev...

Hi everyone, I'm managing my FTD via FMC.I'm sending my syslog to an external server.Now, I've noticed that sometimes I get two of the same log under different user, for example: Jun  3 10:54:59 172.20.1.95 :Jun 03 07:55:00 UTC: %FTD-config-6-111008:...

I just saw today that FTD finally supports VTI for a few months now. I was sad to see it's only new the latest version which ASA 55xx-X do not support. What are we to do if we need VTI supprot on ASA 5506-X? Is that ever coming?

Hi Cisco Community , I tried integrating FMC with AD server and able to integrate Ad with FMC .when i try to download users i get error invalid realm id .  iam using FMC version 6.6.4 and windows server 2012 R2 .  Attached error image .  Thanks for a...

Warning: this is a salty message. You have been warned.While FMC 7.0.0 had a lot of nice and needed features, it went backwards in many others - including basic system functionality. Today’s case in point, the FMC internal email notification system (...

Hi,My customer recently decided to switch from Cisco to Palo Alto as perimeter firewall solution. The design decision was to keep the same security policies and this implies PA provider needs the backup of existing ACPs in our Firepower solution.In o...

Where do I find a procedure where I can configure firewalls on active/standby and DRFirepower 4410

Dear All,I have upgraded my ASA 5525 with Firepower Services and FMC from 6.4.0 to 6.6.1. After upgrade, there is issue that after deployment succeded error message appear said "Process Status - adi exited 1 time(s)" and there is access policy config...