Network Security

Hi All    I have TrustSec between two SGTs to deny SNMP 161 and 162. I see the SGACLs hits and it's denied. but the snmp port still showing in the port scan.  is this normal? it's just the ports showing in the scans ONLY.  I can't get any SNMP query....

I'm trying to setup email encryption and we use Barracuda Email Security Gateway. It appears outbound encrypted emails are not going through because of ESMTP on Firepower. Is there a workaround instead of disabling it completely?

Hi all, I'd like know where can I quickly check failover event log in FMC to verify active/passive firewall failover and failback state. Thanks for your help.

We have a problem where the source IP is in the internal network and the destination in the VPN. Source IP is sending multiple requests on several different ports to destination IP.We remove the source IP from DHCP so that no one can receive an addre...

I use ISE for device administration. We have created Read Only and Read/Write command profiles. Read/Write level 15. for the read only we set the privilege level 3 and then restricted the commands that could be executed.the dir command was permitted ...

Hi there,We've got a standalone ASA 5525 which is connected to the core switch with single physical interface for the LAN and other for the Internet.Now, our ISP needs to change the IP address of the Internet link with a complete different range.So, ...

I would like to ask for assistance in determining what time of syslog events are being received by our syslog server:These are, I think Intrusion EventsDevice SFIMS: [1:43687:2] "INDICATOR-COMPROMISE Suspicious .top dns query" [Impact: Potentially Vu...

Hi I have a 1010 Firepower on the edge with 2 S2S VPN connections established on it.Now when I try to connect from a client inside of the 1010 to a VPN Gateway on the internet, it is not going through, any hints on where to troubleshoot? as these dev...

Hi everyone, I'm managing my FTD via FMC.I'm sending my syslog to an external server.Now, I've noticed that sometimes I get two of the same log under different user, for example: Jun  3 10:54:59 172.20.1.95 :Jun 03 07:55:00 UTC: %FTD-config-6-111008:...

I just saw today that FTD finally supports VTI for a few months now. I was sad to see it's only new the latest version which ASA 55xx-X do not support. What are we to do if we need VTI supprot on ASA 5506-X? Is that ever coming?

Hi Cisco Community , I tried integrating FMC with AD server and able to integrate Ad with FMC .when i try to download users i get error invalid realm id .  iam using FMC version 6.6.4 and windows server 2012 R2 .  Attached error image .  Thanks for a...