Network Security

Hi Everyone, We are using FTD version 6.4 to test the integration feature  with Cisco Threat Response(CTR). But Configuration Guides(FTD version 6.4) say only the intrusion events can be sent for investigation to CTR. This feature was available in FT...

Need help with below Firewall rule change request: Please allow the following UDP for outgoing only: No Type Port Usage 1 Local port 9443 Required for Agent local services 2 Local port 15011 No Protocol External host communications port Usage 1 HTTPS...

I see this when doing "UDP PAT pool management, address X.X.X.X, range 1024-65535, allocated 5"show nat pool" on a Firepower but don't see any NAT statements for this under NAT.

hello dearscan somebody please describe what is the HA bundle devices, is it two devices, a license or what? in example 4120 HA bundle? and any document, please.and also what is the subscription 4120 best regards

Hello, Is there a REST API (e.g. for Firepower Managment Console, etc) that will allow you to add/remove custom Snort signatures/IDS Rules on a Firepower IDS? What about IPs to detect/block on? The closest I found was "PUT Inidicator" for the Firepow...

Hello all, As a network engineer working on a project to deploy and configure a series of ASA 5506-X running 9.9(2) iOS, I have encountered the following important issue:When I configure a NAT Exempt rule for traffic flowing from one zone to another ...

Is it possible to setup a correlation event that will temporarily blacklist an IP address based on receiving a # of intrusion events against a destination IP? Or is there another way in the FP to do something like this?  The appliance is sitting inli...

I don't see any release notes indicating what is needed to run the latest ASDM 7.12(2).  When I try to run ASDM on the latest version my windows 10 throws an error "This app can't run on this PC".  I have Java Version 8 update 171.  Anyone else try? ...

Hi,I have downloaded  "asa917-32-k8 " , Please help to locate the correct asdm version From the download site I found the supported version for asa 5520 is asdm-781-150 . Which one is correct ?  https://www.cisco.com/c/en/us/td/docs/security/asa/comp...

Hello, everybody. In my device, it is actually a router I have the following configuration line: ip nat inside source static network 10.0.0.0 10.128.194.0 /23 extendable no-alias which nats all the IP addresses in the 10.0.0.0/23 to the corresponding...

Hello everyone.I have a FTD 2130 firewall sitting behind internet router which is just route all public range we purchased to firewall. In FTD we do not have any Public IP attached to internet, we use Public IPs on NAT configurations with Proxy-ARP. ...