Network Security

Hello experts, I have two ASA 5545X active-standby and I have an objtect-group natted to the outside interface, inside of the object-group I have one host, for sometime the host able to browse to the internet but now not working. The trace from the r...

As noted in the topic of this discussion I am encountering this issue. The use case is restricting outbound smtps (tcp/587) to allow access only to smtp.office365.com. The customer environment is FMC-managed FTD 2140 with 6.4.0.4 software. DNS server...

Hi guys,I have an issue with a Firepower 1010 (running 6.5) and the FDM.I have a long list with public IP addresses (one address per line) and need to create a Blacklist in the FDM (FMC cannot be used there).When I go in FDM under Policies > Security...

Dear All,I need to upgrade ASA 5525-9.4 to 9.8FMC(virtual )  existing version is 5.4.1SFR existing version is 5.4.0 My first question is  ,do I have to check the compatibility with ASA version for SRF? Or  since ,SRF totally managed by FMC,I have to ...

I have two ASA 5525X in a High Availability (Active/Standby) configuration both running Firepower services licensed on both for IPS, AMP, & URL. I'm managing both ASA FTD's through a virtual FMC. My question is: Do I also need to configure the High A...

Hello All, I am trying to get a general repository of logs from our security appliances to a syslog-ng server. I have managed to do so successfully for all our ASA firewalls, but I cannot get logs from our Firepower appliances to populate to syslog-n...

Hi,I have set up a new VPN tunnel to a remote site, but the tunnel will not come up.Running packet-tracer shows that the tunnel is failing with:Phase: 8Type: VPNSubtype: encryptResult: DROPConfig:Additional Information:Result:input-interface: insidei...

Hi all,I cannot install the SSL certificate we purchased onto my ASA. Here are the messages I'm getting:Can not select my public key (ssl.key)Received General Purpose certificate for signature keypairDo you wish to accept this certificate? [yes/no]:...

Hello everyone,I have Cisco ASA 5525-X with following imagesasa922-4-smp-k8asdm 7.2(2)1asasfr-5500x-boot-5.4.0 I need to deploy the firewall in Datacentre environment. For this purpose , i want to create zones/zone pairs and assign interfaces to diff...

Hi Community, I am new with Cisco firewall and need some advice on the network diagram. We will deploy 2x ASA firewall 5516 with Firepower for external and internal. We will use SG500-X switch in the network for DMZ and LAN. Based on the diagram an...

Hi All    Really struggling to find an answer to this which is strange.    Weve got got a couple of ASA’s with Firepower module on.   the firewalls themselves have got Certs installed from m our CA so we don’t get cert warnings. However I’m still ge...

If you get a notification saying "Error in saving certificate: status = FAIL" when installing an SHA-256 certificate, this means that the SHA-256 algorithm is not supported. how to resolve this error please update me 

Hi all, I need to setup FMC in HA through the FW environment. I went through the configuration guide and cannot find clear confirmation which ports I need to open on the FW to allow HA communication. Is it just TCP 8305 listed in the configuration gu...