Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Encryption level 9

Is there a definitive list that shows the IOS levels where encryption level 9 pbkdf2 is implemented? For example, IOS 15.3(3)MASA 9.7(1) introduced PBKDF2Cisco IOS XE Gibraltar 16.11.2etc. Are these accurate? Are there other versions. Is there any i...

Resolved! Enable Configuring the Management Access List

hello to everyone, by mistake i disable the Management Interface and from then i am not able to login to the web interface of the device.could you help me to enable it again through command line, i connect to the device through a cable with a serial ...

Resolved! ASA 5520 firmware upgrade to 9.1(x)

Dear All,Please advise me if cisco ASA 5520 can be upgraded from 8.0(2) TO 9.1(x) directly as 9.1(x) has a new nat configuration.Also please advise me the effect of natting if the above task is perfomed.Hashmi

assign ip to mac address

I have FMC and want to assign specific IP to MAC address is this available

Anyconnect does not connect mobile network

Hi all,We have a situation where Anyconnect does not connect to mobile network. Although the mobile adapter is listed under networks, after chosing the adapter nothing happens. The connection can only be established in Windows adapter settings. After...

ASA Error for Unknown Certificate

Hi all, I recently renewed some SSL Certs for my ASA5506x devices. I am now getting an error (repeatedly) which claims that the verification of a cert chain is failing. However I cannot for the life of me find the certificate that it is referencing....

Resolved! Unable to download groups via AD/REALM with spaces and underscores

Morning legends, So yesterday I finally got AD integrated with our new FMC. I was able to download groups and users, though noticed very quickly that any groups with spaces or underscores were not downloaded. I tried numerous times, though the probl...

Cisco AMP for Endpoints- Quarantine Failed filtering with actual unsuccessful entires

Hi Team, As per the screenshot, we can find 'Quarantined Successful' and 'Quarantined Failed'. But this Quarantine Failed entries some entries are those which were Quarantined later. Is there any way from console, we can list only those entries which...

Resolved! Duplicate comment and access list create in ASA 5585X

Dear Experts, I am facing a problem in ASDM. When we are creating a rule in ASDM that time we mention CR number or any description in the comment section. But I notice that in some rule the comments are created a duplicate entry (around 2 MB notepad ...

URL Category and Reputation failiure on FTD

Hi all, I am getting URL Category and Reputation failure on FTD , there is no url filtering license available on the device, also the url monitor is disabled on the health policy.What could be the reason for this? As per my understanding FTD will not...

FMC NTP PROBLEM

Dear Concern,Greetings.Please be informed that, recently we are facing NTP related problem with FMC. When we have changed manually time settings it shows below log:You are attempting to view an unauthorized page. This activity has been logged.Please...

Resolved! ASA5506X Crash and Reboot - about every hour

Hello, I have been experiencing random network outages, then when I investigate the problem is resolved. Today I manged to determine that the failure was at the ASA 5506. It was no longer connected to any network interfaces and completely reboot...

FMCv can't see licenses in ASA5545-X W/FirePOWER sensor

Hello, We have two ASA 5545-X w/FirePOWER module. We need integrate the modules with FMCv, but after integrate the licenses aren't available. Without license I can't deploy any policys. The FMCv is running with smart license and modules with classic ...

Resolved! Block Telnet in ASA Firewall

Hi Team, We want to know about block telnet on ASA firewall. If just like RDP service is working on 3389 TCP port. So we want to user not able to telnet 3389 port but actually service is working on same port 3389. So after this process no one is does...

Cisco ASA Bidirectional initiated traffic NAT for subnet addresses

Hi.We have a ASA 5585-x appliance, on which we are running OS version 9.9(x).Topology as per below 10.1.1.0/24 ---LAN device ---ASA--- WAN device (MPLS) --- learning non RFC 1918 prefix say for eg. 100.1.1.0/24 Requirement is to nat both the ends su...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Encryption level 9

Resolved! Enable Configuring the Management Access List

Resolved! ASA 5520 firmware upgrade to 9.1(x)

assign ip to mac address

Anyconnect does not connect mobile network

ASA Error for Unknown Certificate

Resolved! Unable to download groups via AD/REALM with spaces and underscores

Cisco AMP for Endpoints- Quarantine Failed filtering with actual unsuccessful entires

Resolved! Duplicate comment and access list create in ASA 5585X

URL Category and Reputation failiure on FTD

FMC NTP PROBLEM

Resolved! ASA5506X Crash and Reboot - about every hour

FMCv can't see licenses in ASA5545-X W/FirePOWER sensor

Resolved! Block Telnet in ASA Firewall

Cisco ASA Bidirectional initiated traffic NAT for subnet addresses

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Cisco FTD workaround for SSE connector failure stumbled on rights priv

Assigning an EtherChannel Subinterface to an Instance via FMC API

Firepower 1010 readiness check stuck at "Please Wait"

OpenSSH regreSSHion vulnerability in FMC

Hyper-V VHD image for FMC virtual

Cisco Packet Tracer ASA 5506 Prevents Access to DMZ Servers

Firepower 7.42 issue interface Management0 has no link