Network Security

Hi, I would like to ask someone if any of you here guys tried to configure ospf cost in subinterfaces of Cisco firepower 1140, it won't accept configuring ospf cost in more than 1 subinterface of the same physical interface. We have an old ASA 5512 f...

Hi, I think there is a bug in AD Identity objects downloading in FTDv ver6.4-6.6. When I set the Base DN to includes a sub OU which like "OU=Users,DC=firepower,DC=local", and deploy the configuration, none of users or groups will be downloaded. If I ...

Hello!I'm wondering if it's possible to use the Alarm notification Policy with Cisco ASA? The policy we created works on routers and switches (sends an e-mail on config change) but it doesn't seem to work with Cisco ASA. Is it not supported? Thank yo...

I just tested blocking ign.com, but I can confirm it does not block versign.com. Thoughts? I seem to be in conflict with the documentation below. I'm testing with FMC and FTD 6.6. Screenshots attached below. When I go to versign.com it see it's match...

Hi Allas you know if an ips signature Triggers By a traffic you can download  Packets of that traffic in .PCAP format from Analysis ->Intrusions ->Events .im looking for a way to download that PCAP files without accessing to FMC Web interface.is ther...

I have attached a simple setup that I cannot get to work with real equipment. I used packet tracer as more of an illustration to explain the problem but it works in packet tracer. The equipment is not avail in packet tracer so I labeled what I have a...

Hello,Not able to bind my certified signing request. And I have already imported my root cert under trusted certificates.

Keep in mind that this is an FTD managed by FMC, so mostly all config was Pre-Deployed by myself using GPO in the backend.SBL is working fine but it's picking my "Mgmt Tunnel VPN" Profile, which is the incorrect one. How does SBL choose the Profile? ...

Hi, Is there any way I can change management address of a virtual FMC without first remove the FTD from the FMC and then re-register the FTD after I changed the IP address?The issue is that the customer already have VPN tunnels configured and there i...

Hi,I have a mixture of ASA5506-x, 5515-x and 5525-x in my environment.The 5506-x firepower version is limited to 6.2.3.16.There ASA5515-x and 5525-x can go up to 6.4.x version.All these devices are currently managed by a centralized FMC and I would l...

Hey all. We're experiencing difficulty allowing traffic from our outside web server's public IP to our internal SQL server on a specific port, on our 10.10.10.1 private network. We have web services for our customers to use that interface through IIS...

Hi Tech guys, in my Internet edge deployment, My FTD (21110) is behind the ASR1000 Router(Internet Gateway). I want to allow  any connect vpn clients to establish vpn connection to  FTD  via NAT Configured on ASR1000. From the Firewall perspective, I...