Network Security

I do not allow any incoming connections on my outside (public) interface. I see a lot of 'Deny tcp src.....' on my outside interface, this is fine and my acl is working. Is there any benefit if I shun an attacking IP address, against a 'deny any any'...

We are migrating from our ASA5520's to FPR-2110 for Anyconnect. I have set up a standalone gateway which I can connect to and authenticate against using certificates. I have another site where I am running the same config only there are two FPR-2110'...

Hello folks! Always when I try to deploy my configs in the FTD firewall, I receive the follow message: "The interfaces 'inside, inside' have ECMP eligible routes configured. Please make sure that interfaces 'inside, inside' are in same ECMP zone, els...

Hello Folks, I am looking for context routingLet's assume if I've destination IP that belongs to context #3 out of 7. Is there any way without enter in context 3rd can we know that IP belongs to which context from ASA default mode? Or anyway like we ...

After installing the new anti virus on all PCs in our company, the CPU usage of our Cisco firewalls increased up to 92%. How can we upgrade the CPU of the device to lower the CPU usage? Thanks.

Hi all, I have 2x interfaces of my secondary FTD (Firepower 2130 failover cluster managed using FMC) whose interface bandwidth step down from 10Gbps to 1Gbps (as seen when i ssh to the FTD) even though there is no config change on the FMC or on my fi...

I have a few firewalls that I have Cradlepoint 4G LTE devices configured as a backup ISP. Works great, no issues with SLA configuration or anything like that.  However, I need some more brain power. Because everything is up/up including the Ethernet ...

Hi,   I just upgrade mu vDC from 5.2.0 to 5.2.0.7 and get the following error message : Update Installation Failed : [%] Fatal error: Update to version 5.2.0.7 is not complete. Please complete update to 5.2.0.7   Please help to advice how to resolve ...

Hi AllI read previous Forum'Posts about Cisco ASA Dual Wan Load Balancing/sharing. is it supported to configure Dual Wan Load Balancing/sharing in Cisco ASA with latest version for now or it is better to use Cisco Router for this one?if it is support...

Hello guys, I am configuring the Cisco ASA 5585x rest api.  During config time successful below commands.A/ASA-Cluster# show running-config | include rest-apirest-api image disk0:/asa-restapi-7141-lfbff-k8.SPArest-api agent But, I am running to 500 e...

Community, Has anyone been able to get PxGrid to work with FMC/FTD because I am running into an issue with it in my POC lab: ISE version 2.6 (using Internal CA for PxGrid)FMC version 6.6.0FTD version 6.6.0Windows 2016 AD (Enterprise CA) To simplify t...

Hello for everybody.I recently had discussion with a colleague about the possible implementation of the next scheme. There are two devices that stand in HA, for example two asa 5508-x or two firepower 1140. Is it possible to implement on a network th...

Hi all,As I have firewall and L3 switches connected in an infrastructure.Cisco FirePOWER is configured with Global OSPF as VRF is not supported.Cisco Switch is configured both Global and VRF OSPF.Before the following hardening is performed, the routi...