Network Security

I have a HA cluster of FTD (Active/Standby). On FMC, the monitoring is complaining failures in screenshot below for the Standby FTD. Everything is healthy on the Active primary FTD and FMC... I do not see any blockings or DNS issues...Any suggestions...

Hello, Our client is requesting to block all outgoing traffic through 2000 IP adresses presented on a csv file. I'm wondering if there is a way to import this file into the ASA and use it in a firewall rule. Best regards,

Dear TeamI have a Cisco IPS 4720. After joining my organization have not received the password of the Cisco IPS 4720 from my senior. He is telling that he forgot the same. Kindly help me in recovering the password. 

Hello I would like to ask what certificate the CSM uses in order to communicate with the managed ASA. I am referring to the thumbprint it shows in device properties.  Is it related to the identity certificates in Certificate management or is another ...

Hi, I have some question regarding VPN created on ASA 5506 with Firepower services: - Why with this setting Send NTLMv2 response only. Refuse LM & NTLM end user can't connect at VPN through Radius Server ?   When putt lower security layer it's workin...

Lets take this scenario: A workstation gets IP via DHCP, say 10.1.1.1.A host profile is built for this workstation.Now this user disconnects his workstation from the network.Another user gets this same IP 10.1.1.1 via DHCP What will happen to the hos...

Hello team,  We have multiple ASAv registered with smart licensing and working perfectly. But, each time we make a change to the VM parameters, the asav gets unlicensed with a warning"there's no active ASAv platform license installed'.Once we push ag...

Hi All    I have TrustSec between two SGTs to deny SNMP 161 and 162. I see the SGACLs hits and it's denied. but the snmp port still showing in the port scan.  is this normal? it's just the ports showing in the scans ONLY.  I can't get any SNMP query....

I'm trying to setup email encryption and we use Barracuda Email Security Gateway. It appears outbound encrypted emails are not going through because of ESMTP on Firepower. Is there a workaround instead of disabling it completely?

Hi all, I'd like know where can I quickly check failover event log in FMC to verify active/passive firewall failover and failback state. Thanks for your help.

We have a problem where the source IP is in the internal network and the destination in the VPN. Source IP is sending multiple requests on several different ports to destination IP.We remove the source IP from DHCP so that no one can receive an addre...

I use ISE for device administration. We have created Read Only and Read/Write command profiles. Read/Write level 15. for the read only we set the privilege level 3 and then restricted the commands that could be executed.the dir command was permitted ...