Network Security

HI All, I have a issue about FTD 2140 at Inline IPS topology.I only have a ACP rule and source and destination are any.But when I execute show asp drop  command on FTD 2140, it display many acl-drop packet.So I execute command with capture asp-drop t...

Hi Team, please help us to migration of ASA EIGRP configuration to FTD configuration, below is ASA configuration.router eigrp 100network 10.10.10.0 255.255.254.0authentication key eigrp 111 ***** key-id 1authentication mode eigrp 100 md5access-list E...

Hi, we're trying to implement a new ftd 2120 in our network. It should replace an old ASA 5505(same ip-addresses). We've tried it last weekend, it worked so far but we had trouble with the traffic coming from a seperate vpn-gw in the DMZ to our proxy...

hi the ASA running with the transparent mode .our DHCP server is put in the outside ,and our client behind the inside interface. The problem is the PCs can't get the ip address use the DHCP. Because DHCP relay services are not available in transparen...

Hello all, I'm working on securing our network from TTL Expiry attacks.The reading I've done says I can use an ACL:ip access-list extended ACL-BLOCK-LOW-TTLdeny ip any any ttl lt 16permit ip any any!interface g/#/# ip access-group ACL-BLOCK-LOW-TTL i...

Hi All,I am hoping someone can help. Can NTP support SHA256 now? My Cisco portable command guide says only MD5, but I found some references to it on Cisco's site, but not when the change may have happened. Its possible my book is out of date. Many th...

Hello,   please does anyone have an idea, how FMC determines Hostname of any host in Host profiles? I cant find anything about it in admin guide. There is only written: if known.   Thank you   Best regards

Hi Experts,We're trying to upgrade Anyconnect from 4.8 to 4.10 on Windows 10 machines via Force upgrade (placed the recent version in the top of the Remote Access VPN config under WebVPN on the ASA) and after the successful upgrade, we've received th...

Hi, I made an integration between FMC 7.0 and ISE3.0 through pxgrid. Connection works fine.Primary host:[INFO]: PXGrid v2 is enabled[INFO]: pxgrid 2.0: account activate succeeded[INFO]: Successful connection to ********:8910[INFO]: These ISE Services...

Hello I have an issue with ASA FW that is used for VPN purposes. I see a lot of dropped packets in two interfaces. The reason is ICMP Inspect seq num not matched (inspect-icmp-seq-num-not-matched) The source is a VIP of some servers and the dest are ...

Platform: single Firepower 4110 firewallCurrent FXOS Version: 2.7(1.106)Current FMC Version: 6.5.0.3-3Current FTD Version: 6.5.0.3-3 We're trying to upgrade FTD from 6.5.0.3-3 to 6.5.0.4-57. After attempting to install or push the 6.5.0.4-57 image we...

Dear Community,I had a question about interface monitoring for failover on the devices. I have a mix of port channels with sub-interfaces as well as individual interfaces. In terms of the port channels, should I be monitoring only the port channel or...

Hello im trying to establish an ipsec tunnel between 2 ASAs 8.4 with no luck, but i dont seem to find out what is missing Can someone check if my configuration ts ok? i SITE AObject-group network COMPANY-ANGNetwork-object 192.168.100.0 255.255.255.0N...