Network Security

How can I configure Firepower to detect inbound exploits i.e., if somebody is trying to exploit a known vulnerability to the box itself or to a resource exposed to internet. We have Firepower 6.5 and various version of ASA

Hello everyone,I have seen listed notification, that with this box we cannot use the Firepower services. They are already EOL. We have purchased the box before July 30, 2019. please let me know if i can use the firepower services here. I am little co...

I have been tasked with seeing what the highest version is to which we could upgrade our ASAs and so far my strategy has involved checking the release notes and checking for any usage of the deprecated commands. Is there a better way than this? Is th...

Does anyone know of a tool that can do ACL risk analysis? Looking for something that can review the ACLs and return the ACLs that might be high risk ie: allowing src ANY from internet etc.. Something so I dont have to manually check firewalls all the...

Hi everyone, I'm facing an issue when I try to get a telnet access to the smtp.gmail.com for port 465 & 587 using FQDN. I did everything correct right from making objects, service types for port & access-list for the same. When I use IP Address inste...

Hi, I have two firewall. A subnet 172.30.1.0/24 is hosted at inside interface on FW 1. When I am trying to ping from FW 2 to a host 172.30.1.127 (Hosted on FW 1 inside), it is getting ping but when I am trying to ping 172.30.1.126 it is not getting ...

Hi.I've upgraded FMC to 6.7 and the new Health Monitor page does not load. It seems like it's trying to load the new monitor health page but after a few seconds it falls back to the pre 6.7 health monitor page. Have anyone seen this issue and is ther...

Hi y'all, I was in the process to migrate yet another multi-purpose DMZ ASA context to FTD when I encountered an interesting situation.Firepower Migration Tool successfully detects 8 logical interfaces and 167 access control list lines from the given...

Hi,We want to apply a specific TCP timeout value for a specific access control policy.We saw that you can configure the TCP timeout value globally (for all access control policy).  But can you also apply a TCP timeout value specific for a certain acc...

Good morning, I was wondering if anyone could confirm if the Cisco ISE Passive Identity Connector - TS-Agent is compatible with Microsoft Windows Virtual Desktop (WVD) Multi-Session VMs which are essentially Windows 10 devices?  The literature seems ...