Network Security

Dears I have allowed to access a websever on HTTPS port onlythe problem is  when a client tries to access HTTPS , firepower will allow client to access webserver and in event viewer will show ClientIP:sourceport to WebServer:443 allowed  but the prob...

Hi Guys,I am just wondering where is the best placement for a firewall doing an SSL decryption? If I have a multi-tier firewall in the network, tier-1 which is facing outside network will definitely needs SSL decryption but how about internal firewal...

Hi all,   Possibly posted in the wrong place but after some advice please.    We have Cisco Prime infrastructure 3.1 and we have added our ASA's to it (5555-x and 5585-x). I have read that these devices are supported but it does't say to what degree....

I have number of servers with Redis Pipeline (redis.io/topics/pipelining) enabled. A FTD is managing routing access between servers like this:Redis client --->FTD--->Redis Servers192.168.2.10/24-->192.168.70.33/24192.168.2.10/24-->192.168.70.34/24192...

I am about to uprade two FTD 4110 FXOS. The first upgrade has been succeced on the Secondary and then I tried do run the same steps on the primery FTD. I has been runing upgrade in more than 2 hours on the primery FTD now and I am soure that some thi...

Hello everyone, I am currently in the process of rolling out Dot1x in a small classified network. The network has the following: (12) Windows 10 Machines using native supplicant software(1) Cisco C9300 acting as the authenticator(1) Cisco ISE acting ...

Hello Dears  Why does some traffic is blocked in firepower for example from 2.2.2.2:3344 to 10.1.1.10:443 is allowed while response back from   10.1.1.10:443 to 2.2.2.2:3344 I only allowed traffic from public (2.2.2.2) to reach 10.1.1.10 on port 443 ...

Hello TogetherPlease i will open for LAN "Inside" the SSH Port. try with this commands but no postive result appair "Connection redused"i know iam on the right way, please and thanks for any Update:asa(config)# crypto key generate rsa general-keys mo...

Went From a all intern WAN to a SD-WAN. before SD-WAN I mapped 16 of my Public IPs to a Local DMZ Subnet off my ASA-5525-X Allowed RDP and piped that VLAN directly to a Virtual Machine in the Remote Office. Remote user was only able to get to the VM ...

Hi, can anyone help me to how setup a client-to-site vpn on RV345 router, I've tried many ways but no luck. I already went through the Cisco guide for this onhttps://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-router...

Community,I recently implemented FTD's and had a question. I am not seeing any Intrusion Events or Attackers populating in the Intrustion Events or Geolocation tabs in my dashboard. Is this because I have not yet enabled the "inspection" option in an...

Hi,We haven't been able to set up SNMP monitoring for PRTG. We found some articles informing a diagnostic interface and\or set the platform setting policy (which is currently blank) need to be configured? Can anyone share any documentation that expla...

Hello,  I upgraded CSM 4.19 to 4.22 SP1 to be covered from the CVE-2020-27131 vulnerability.The thing is that the scan finds again this vulnerability.  The customer informed me that this path cwhp/CSMSDesktop/about.jsptriggers the vulnerability in Qu...

Hello,I'd like to configure the ospf bi-directional forwarding on a FTD 2130 using FDM.Could someone help me? I've checked on FDM, there weren't any BFD CLI commands in OSPF config even I clicked on "SHOW DISABLED". But I saw in BGP config.Maybe I ca...