Network Security

I have a range of IP's which are assigned for Internet facing servers. I had already defined all of my HOME_NET in which I also included publicly addressable internal IPs which I would like to monitor. However I had not added these external facing ne...

Hello, can someone help me configure a whitelist on Firepower to only allow access to netflix.  There's a built-in application filter for netflix's but I get an error.

I have ASA 5585SSP40 one interface naming external and i have interface having zone116 ip address 10.26.X.X from interface external want to connect server 10.92.x.x  but unable to connect and when i see in the logs it is showing like this Deny TCP (n...

Greetings, I've recently been tasked with making some of my servers FIPS-compliant.  In the process I've run into a problem accessing my sg500x-48p switch via SSH.  I get the following error: no matching key exchange method found. Their offer: diffie...

Hello Guys, I'd appreciate it if you'd help me out. I have two firewalls, a primary and a secondary in failover mode, 5 days ago I failed the primary and the secondary took the role of active, so far so good. The problem is that the primary/standby d...

Hi everyone,   I can't get fpmc to copy to an sftp server. It's a well tested tftp server and it is currently being used for call manger backups and it has worked for years. All I get from FPMC is this:   Backup Name: test_fpmc_backup_20180321103002-...

I have recently bought a firepower 1010 as an upgrade from my older 5510 that I have. Unfortunately I am unfamiliar with the Firepower device manager and can not for the like of me figure out how to forward port 80 from my outside interface to my int...

Hi experts,our ASA (on FPR) is performing site-to-site IPsec VPN Gateway duties, however, "show asp table socket" doesn't show UDP/500 and UDP/4500 (or ESP). (ASA's interface IP address is used as local VPN Gateway address.)Q1. Is there a command to ...

Hi all,I have increasingly been having issues around two new FPR1010s bought as a cheaper basic set of firewalls to add to our network. I was hoping I could get some advice :) 1) My first FPR1010 I thought I would configure the management port so I c...

Hello, Just looking for some clarity around a deployment we are looking to do for a customer. So Basically they are looking to put in FTD 1140's at multiple sites. We will be looking to configure sub-interfaces on this and then the usual ACL's etc fo...

Is there any dependency on the mounted ISO when deploying a virtual firewall?    Once the firewall is deployed can I dismount the ISO without issue?   Thanks.

Hi Guru's, I was looking to block all domains ending with .bar to block list on firepower 9300. I tried with wildcard 8.bar to block domain list under objects>Security Intelligenec > dns list and feeds but its not working. Probably my version which i...