Network Security

Hi Everyone,Can somebody clarify my if I put access control rule in AC policy in firepower that allow traffic from A to B does it automatically permit traffic from B to A? I mean, do I need a new rule that will allow opposite direction?for example, l...

Hello gentlemen, Sires, I am configuring a Stealthwatch enterprise, I did install Flow Collector and SMC, as well as I have confirmed the flow of netflow between one of the switches and the appliances, however I still have a doubt about the configura...

Hi, In the "Advanced" tab under the "Network Discover" policy  settings, if we set the "keep active identity" results and then we run a NMAP scan on a host, then all the OS related vulnerabilities disappear and are replaced by the results of the port...

Hi,I just recently upgraded two (H/A pair) Firepower 2110 from version 6.2.3 to 6.6.1The upgrade went well. However, I noticed the following alarm message when the upgrade was doneHardware Alarms - Firmware version MISMATCH. Contact Cisco TAC for ass...

Hi,I am trying to ping webserver in dmz from a remote pc, with IP address 192.168.10.12 in packet-tracer. ASA drops icmp reply packet with message 'next-hop ip address is not in the ARP table'. I am able to ping the webserver from pc with IP address ...

Hi there,i am new to cisco environment, can anyone tell me how to configure the AnyConnect VPN in Cisco ASDM, i have ASA Version 8.4(3) and ASDM Version 6.4(7). i have tried to do it through AnyConnect wizard, but i am stuck on license configuration....

Hi All, My firepower2130 is running on FTD 6.4.0.9One day, the VAPT scan detected Certificate has Expired, and i found out its the https certificate.and this certificate is located in the FXOS. unlike those you can set in FMC > devices > certificates...

 Hello, I have a Cisco ASA 5508-X and I want to configure Active Directory authentication.Hopefully, I found a great tutorial in this website.My problem is I cannot found ad agent that are required to finish my configuration. So, please help.

#1 When I set up the router initially, I purposely turned on management via internet.. so when I access my static IP via internet to port 80, I get a login prompt to the router. How can I disable this over WAN? #2 How can I port forward tcp 5000 port...

I'm struggling to find information on how to apply a service-policy to an Internet connected interface on an FTD1010.  Cisco docs indicate this is possible by setting up a QoS policy within an FMC, however I don't have access to one to do this. I've ...

Hi All, I'm looking to configure a pair of Cisco Firepower 4110 appliances that are running ASA software. I have read through the below configuration guide and it states that when configuring the logical ASA device, a management interface needs to be...