Network Security

Hi AllWith IKE V2I believe it still has a phase and phase 2 proposal (init and auth)On the ASA, is the ike policy the phase 1 and the ipsec proposal phase 2 for ike v2?cheers

out of the box setup using FDM and the client device or the management device dont get DNS.manually enter a DNS IP in the client NIC properties and DNS lookups work. I can browse the internet. The same applies for the device on the management port.ho...

This is the current asa config and it not working, I am not good in cisco firewall and my background is a checkpoint. please suggest me can I apply the below config. Current Config==============interface GigabitEthernet1/1nameif CORPsecurity-level 50...

Hi All,I have separate bidirectional rules in my firewall (ASA 5545-X) for different applications (including VoIP). What is puzzling here is if i capture logs for the traffic coming from OUTSIDE (of firewall) back into the segmented environment i am ...

Hi all,-Cisco Firepower App for Splunk version 1.3.7-Cisco eStreamer eNcore for Splunk version 3.6.5We've successfully setup estreamer between Splunk and our FMC, when I search in the Splunk events forsourcetype="cisco:estreamer:data", I see thousand...

Hi, We are planning to upgrade a single 1 gig link to 2 X 1Gig link port-channel in FTD-2100 for Inside and Outside interfaces. Now when I try to add a port-channel it does not give me an option to add the existing interface. So does that Mean I need...

Hi Community, I am getting an error log on my CISCO ASA as below.%ASA-4-402123: CRYPTO: The ASA hardware accelerator encountered an error (Invalid PKCS Type, Pad, or Length, code= 0x1B) while executing the command PKCS1 v1.5 RSA Decrypt with CRT (0x2...

Hello,  I upgraded CSM to 4.21 and the policies do not load. It stuck at 21/50.  Do you know what logs to look at?Or what to look for? Thanks and regards, Konstantinos

Hi All, My employer requires that we have the ability to look back at a users web browsing history, whilst these requests are generally for sometime in the last 3-6 months, we are expected to be able to report out to 12 months. I am aware that you re...

Hello. I have an IPsec tunnel acting as a backup path for an internal (EIGRP) link on ASA. It will be triggered only if the internal link goes down and since traffic does not find any EIGRP route then it will be matched with the default route and bri...