Network Security

HI,Pls suggest me how to to do the following tests in FTD (Case 1)Test Item -Detect Land AttackTest procedure /Reference - Same Source IP/port to destination IP/Port to be generated on the outside  interfaceExpected result - Deny traffic should be sh...

Hi, Can anyone please help me understand how often FTD gets deployed ? I am asking this question because in our environment I see deployment pending on few devices. Also I am seeing "applied policy is out of date" will this effect on FTD's ?   Thanks...

We had a previos TAC case open when the engineer created an asp-drop packet capture. It wasn't deleted, and we're having a problem today, so I decided to crank that up to see what packets may be dropped. Packets are flying across the screen, and I ca...

HI, I have Firepower (FTD) in HA managed through a standalone  FMC, There is  a peculiar issue, Whenever my Primary unit is active and I deploy , I get the error " Deployment failed due to communication Error", So I have to switch over to secondary u...

Dear All,I have a standalone FMC managing 2 FTDs in HA, Recently I observed that Primary unit is showing disabled and secondary take on as active. During trouble shooting,It is found that I could not ping Manager(FMC) from primary unit [FTD]I could s...

Hi, Our monitoring is showing MEMPOOL_HEAPCACHE_0 2% freeCan anybody explain to me what it means and how i can fix the issue: sh verCisco Adaptive Security Appliance Software Version 9.8(4)25 Firepower Extensible Operating System Version 2.2(2.124) D...

Our ASA [ver. 9.10(1)] does multicast routing and the source is directly connected on inside. Every once in awhile a multicast stream (group) does not get forwarded to the RP (outside) and is dropped (show mfib ), and stays dropped. Performing a clea...

Hi all, i'm looking for some clarification.  We have two firepower 1120 which we want to deploy in HA active/standby configuration.I have been reading up on my options around interface redundancy, and as far as I can tell we cannot operate with redun...

Hi, I have Firepower [FTD] in HA, Both the Firepower devices are connected to Nexus (93180 FX).I have configured BGP between Switches and and Firepower,While doing Firepower switchover or  switch failover ( Shutting down on switch] , we observed that...

HI,It's taking long time in active/standby FTD switchover,Is there any mechanism to minimize the fail-over time or is there any config required?  Primary Unit to Secondary unit - it takes 5-6 seconds Secondary Unit to Primary unit - it takes 10-11 se...

HI, I am not able to deploy policies from FMC , have tried in many ways but issue remains unresolved, I am planning to Reset the FMC  to facory default setting and start the fresh configurations, Pls let me know the process to do the same I have two ...

Dear all,I have a network which in this Netwrok my FTD isnt connected to internet because of some security issues. As far as I know, to use AMP, our FTD has to be connected to Cisco cloud. In this scenario, my FTD isnt connected to cloud and the rule...

I have a very basic question. We have a Cisco ASA 5505 in our personal office. It limits the bandwidth to only 100 Mbps. Our internet is 300 Mbps so we're not getting the full functionality of our internet. We want to upgrade the 5505, but not sure w...