Network Security

Hi,I am having issues to make work a passive FTP server with explicit TLS encryption because ASA is blocking the response on a random port, even when I have enabled this configuration:access-list ftp-list extended permit tcp any any gt 1000!class-map...

Hi, When checking firepower dashboard, saw a number of connection events that should have been dropped were showing as "would have been dropped" indicating the packets were allowed to flow when they shouldn't have. I'll attach screen shots of a few o...

On 13th of May we updated our Cisco ASA 5525 Cluster from 9.10(1)17 to 9.12(3)12.Today I saw in our PRTG monitoring, that the cpu usage is know on 29-33 % during the night, when it was 3-5% before the update. The CPU usage raised exactly at the momen...

Hello to everyone, Recently we bought a firepower 1140 threat Defence and i am wondering if i am able to confirure an outside interface with PPPoE.  i perfromed the initial configuration and also i dont know how to configure that. i am not able to ch...

Hello for everybody. I need to allow tcp and udp 123 port on external asa interface from two external ntp servers and block from any other.  The following acl is currently applied on the external interfaceaccess-list OUTSIDE_NAT extended permit icmp ...

Can anyone describe how PAP works between ASA and Microsoft NPS for RADIUS authentication and how MS-CHAP is different?Please don't tell me that PAP sends the password in clear text. I have taken PCAPs and I see no clear text shared secret or passwor...

Hardware: ASAv30Cisco Adaptive Security Appliance Software Version 9.9(2)1 Whenever I try to enter any show run command, for example "show run" or "show run access-list", the CLI terminal hangs up without generating any output and I have to close the...

How can i change th IP of the Firepower 1120 from the console port???

 Hello All, We have a remote office where we run a standalone FTD 2140 appliance. Now there is the need to add that appliance to an existing FMC. The 2140 appliance has locally configured routing (inside & outside interfaces), several site-to-site VP...

Hello. I am trying to configure the dhcprelay enable q-inalextnet command on a Firewall, and it throws the following message:This interface is shared and cannot be configured with DHCP. I found that this is related with a bug ID CSCsv96850. I would l...

Hello,  I stumbled upon a problem today. I have an ASA with firepower services.  I noticed that in the events some URLs are shown as numbers and the action is blocked. Is there anything, in particular, I could check to see what kind of error this is?...