Network Security

How can I configure ISE admin access to authenticate from RSA (external identity source), but then authorize base on AD group membership? When I set the authentication to the RSA Server, it does not permit me to change the Admin Group setting to an A...

I have a multi context ASA with several subinterfaces ..due to an architectural change i need to migrate 3 of its subinterfaces of a context and the related traffic to a new FTD Firewall.. Is it possible to do selective Migration ? i only want to mig...

Hello, Is it possible to change the source address for the FTD appliance (managed by FMC) so that it sources from the inside address which is allowed over a s2s tunnel, rather than the public IP? If so, is there an example out there? I want to send s...

Hi,we are using a Firepower 2100 series in Version  6.4.0.6 and Anyconnect for RAS Client Login.So as users opens database connections to our Oracle Servers, they will get an automatic disconnect from ORACLE after, i think 15minutes not using the ORA...

There is a Firewall Rule from 10.1.1.29 to 10.7.3.220 on tcp 445 port. When Checked from FMC GUI Log it does not show any log from 10.1.1.29 to 10.7.3.220 on 445 port. Rather we see traffic from 10.1.1.29 to 10.7.3.220 on port 135 from FMC GUI. Howev...

Hello,I'm currently testing pair of FMC 4500 in HA (6.4.0.8-28 upgraded from initial 6.2.1) before introducing into production and I'm facing some issues. On the active unit I scheduled to run daily backup of the FMC configuration to the remote stora...

helloi bought cisco  asa 5506-x with firepower from ebay and i do not get the pak key and the fire dont has any license no control or protection or any other license how can i get license even for training purposes thak you all

Hello,  We recently upgraded our 5545-X ASA with 1120 FTD's. I am now left with 3 5545-X units that I am unsure of how to repurpose. I'd hate to recycle these or keep them in storage since they are still high end and current. Does anyone have an idea...

I am trying to clean up the NATing to setup a VPN, but the Nats are overwritting the no nat statements. I am trying to clean them to by adding the source dynamic any interface. The firewall is wanting me to remove them, and I cannot find anything onl...

Morning! Happy 420. I am fairly new to this Firepower Management System we just installed. An exclusion rule was set up for domain connected devices so when added to the right group we get full internet access and sites like youtube are not blocked. ...

Are there any tools available for checkpoint security policy migration to Firepower threat defense security policy?