Network Security

Profinet ASA Non-Industrial

Want to regulate Profinet traffic on a:FPR-1120 - ASA 9.13(1)Mode = Transparent https://wiki.wireshark.org/PROFINET/RT Is there any way to allow this traffic? Has anyone an idea for me? Thanks in advanceJOP

Passing RTSP through FTD

Hi!I'm experimenting with passing RTSP stream from IP camera to my PC through 2 FTD devices with NAT.CAM is using separate UDP ports which are known from RTSP SETUP message sent from PC (client_port header) to transfer video.Here's my setup:PC ----- ...

ASA to FTD

HelloI am migrating from an ASA to an FTD 2100 using Cisco's Firewall Migration Tool. My VPN tunnels, policies, and ACLs are not transferring over. Has anyone else encountered this?thank you

Virtual FMC licensing

I am building a LAB, which includes 2* FTD11xx. We have production FMC 2500 but I don't want to use production FMC to manage the FTD instead to use a Virtual FMC, Wondering if I need to buy it or available free to download!Do we need license for FTD ...

Resolved! ASA Contexts and Syslog

If I have an ASA with 5 security contexts enabled, how is syslog handled? Is it on a per-context basis, or centrally from the admin context?I'm evaluating a logging solution that is licensed per "device", where each device is a unique syslog source. ...

Resolved! 3 tier firewall architecture

Hi,I am confuse in everybody say 3 tier firewall Architecture.Let me know what is it.If i divided 3 zone and applied to three different subnet and applied to three different interface with each network,can we call 3 tier architecture?OR it must have ...

Resolved! Firepower 4115 Chassis Manager REST API - subinterface creation

Hi,I need to create a lot of sub-interfaces on Chassis Manager and was wondering if anyone has done this using the REST API ? I did look through the Cisco Firepower Chassis Manager REST API Reference guide on the DEVNET pages (although it said it wa...

Why ASA Removes TCP Option Field.

why ASA removes TCP option field, is there any security reason or something else.Ex:- Think about BGP Authentication, MD5 hash carry into TCP Option 19 field, but by default ASA Removes TCP Option field. Why?

URL Rule When IP Changes

Hi,A customer of mine is facing a problem with his firewall. He create a URL rule for some cloud applications, but when the cloud IP chages, the applications stop working.I'd like to know if the Fire Power has the capability to create a URL rule that...

Resolved! Cisco Cloud Configuration question

Hi,Maybe a silly quesiton I'm struggling to find out what Cisco Cloud Configuraiton actually is? Can anyone shed any light on what it is! It's flagging as 'Failure' under our devices on FMC. The other feeds seems to be fine. RegardsGeorge

Resolved! problem with Destination NAT on ASAv

Hi I am new to Asa doing practice in eve-ng with ASAv V 9.7 in this topology i have a server inside with IP address of 192.168.1.200 and want to reach the loopback address on R2 with IP 44.44.44.44 with NAT but i want to practice the Twice NAT...