Network Security

Aaa for serial login in asa

Do we need to enable aaa for serial login?.Currently I have not enabled and it's blank, when I queried the cisco tac whether not having a aaa config for serial cable while having it for others such sab and ht woud work he said. He said when I connec...

AD dynamic port range should allow in firewall

Hi,I would like to ask about to allow essential port on firewall to secure.I saw essential port to open for active directory service as below .RPC endpoint mapper: port 135 TCPLDAP: port 389 TCP, UDPLDAP over SSL: port 636 TCPGlobal catalog LDAP: por...

Resolved! FTD failed simulation : Drop-reason: (no-adjacency) No valid adjacency

Hi team, I'm simulating packet tracer before putting my FTD on production: But when sending a packet from a Lan machine to google : I get always this result : Result: input-interface: inside input-status: up input-line-status: up output-inter...

ASAv50 Display failover state difference CLI with ASDM

We deploy ASAv50 version 9.12 but I found ASAv50 display failover state difference CLI with ASDM. CLI Display : Active/ActiveASDM : Active/Standby Please suggest me .

ASA Firewall

I currently am using a ASA 5510 Firewall and ASA 5516-X, by defaut what security settings aren't enabled that I should have enabled in any network configuration? Also, by Default is IPS/IDS enabled or is this something that needs to be configured? An...

Resolved! FTDv w/FDM smart licensing question

Hello all. I have a client who requires an air-gap FTDv deployment. They are using FDM for management. This client cannot use a satellite server, they don't want any communication over the Internet. I know that software version 6.3 provides an air-ga...

Resolved! [ASK] Inside can't access DMZ on ASA

Hi all,i have some problems which seems too wierd. I have an ASA 5540 in my client's office. The previous plan is using inside and outside scheme only, while dynamic natting all inside network (10.0.0.0/8) to outside. And static nat several IPs too. ...

Resolved! Port forward and ZBF

Hi All,I have a number of ports to be forwarded to an internal server. All works fine until I apply my ZBF config.Anyone able to cast an eye over my config to suggest how I forward a single port from the internet (dialer 0) to a device on vlan 20?i.e...

Resolved! Firepower Management Center: Indication of Compromise / URL Block

I frequently see devices listed in "Indications of Compromise by Host" When i drill down to see what the issue is, it's usually "The host may connect to a phishing URL" or "Malware Site" When i drill down further to the events that triggered the IOC,...

Resolved! aaa new-model

Hello, what is the suggested method to configure aaa new-model and 802.x on a remote router without locking myself out of the router and if I did lock myself, what is the process to recover and access the device again. Here is my current config aaa ...

Custom URL Filtering is not working in Cisco Virtual FMC 6.3

Hi there, I am Currently using Ciscofirepower 2110 as an external firewall with Virtual Firepower Management Console(FMC) 6.3 version. I have 2 questions regarding Custom URL Filtering. 1st: how can we check via FMC which URL is blocking firewall and...

ASA firewall penetration testing

Hi forum,Due to SOX requirements, we are supposed to perform penetration testing on the firewall to ensure it is working as accordingly. There are tons of info on the web, I am almost complete novice at this, I would appreciate if you could advise me...

Resolved! Searching logs in ASDM for IP address

Hi Everyone,I need to check logs for user PC IP in asdm.I am on asdm page that shows real time log viewer.Under filter by i put user PC IP address and click on filter it shows blank?ThanksMAhesh

Resolved! FP Diagnostic interface setting up

Trying to enable diagnostic interface on FP 2100 for gathering information over SNMP. The interface itself marked green in FMC and static IP address is set up but neither ICMP or SNMP to this interface are not responding. Management interface itself ...