Network Security

I'm having a problem with a SSL Policy, which I use to analyze SMTPS traffic with a Firepower sensor managed by FMC. I have my own mail server inside my LAN, so I want to analyze incoming SMTPS traffic with the Decrypt (Known Key) method, as I own th...

Hello, Over the past couple of months I've had a couple of incidents, once where the FMC was down for a RAM upgrade and another where it lost Internet access. On both occasions, we lost the ability to browse most websites (we use Firepower as a basi...

Hello,I need to configure SSL VPN with certificate authentication in ASA but I am having some issues to find a detailed guide about how to do it. As far I know, I just need to specify Certificate as Authentication Method in the Profile, install the c...

Hi, I am applying solution to protect credit card transaction so that any credit related traffic should not leave company environment. I think this is possible with IPS for  sensitive Data detection. I have default policy Balance Security and connect...

I don’t have any issues when I bypass my ASA firewall and use my U-verse WiFi to connect to Webex.  When I look at the log when trying to connect to Webex, I see a bunch of icmp packets being blocked.  Has anyone seen this issue with Webex?

Greetings,       I am using Cisco Firepower Management Center and have an existing network list created for blacklisted IP addresses.  Problem is when I try to upload an updated list from the location I have used for the past 3 years, the number of a...

Hello Community, I want to upgrade an Active/Standby Cluster from version 9.6(4)36 to 9.12(3)2My question: Do I have to pay attention to something here, because the major release is changed? Or is this Straight Forward: - Secondary Unit Update- Resta...

I'm running into an issue with our ASA that just started this weekend. Prior to this, everything was working fine and I am not sure what could have changed if anything. This ASA only is used for AnyConnect. Everything works fine and then all of a sud...

Hi , i did some research and found some article saying mutli-vendor FW is outdated and should not be used anymore. Saying that with NGFW, its okay to use single vendor .link:http://techgenix.com/firewalls/ I didn't see any guide reference to use mult...

Could someone here please help me answer this question: have a 6504E running on 15.5(1)SY5 (latest) and need to know if its KEX algorithms can be updated somehow to a more modern set, currently only supporting diffie-hellman-group-exchange-sha1.  Tha...

Hi, object-group service DM_INLINE_SERVICE_1service-object object 8069access-list Outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any object Obj-192.168.100.100object network 192.168.100.100nat (DMZ,Outside) static 1.1.1.1 users ar...