Network Security

Hi,We had a external pen test done and we were told that our firewall is leaking internal IP address. (Waiting for the official report)I started gathering some logs and did find nmap from external to internal host. (Source was public IP and destinati...

Hello,  The chassis FXOS (FPR-C9300) with Asa modules, has reported the alarms below: [FSM:FAILED]: Bundle data ports.(FSM:sam:dme:SdPortsBundleBundleDataPorts)[FSM:STAGE:FAILED]: Update the bundle status(FSM-STAGE:sam:dme:SdPortsBundleBundleDataPort...

The quick 'n dirty: - Cisco ASAs logging informational level send to a server running syslog-ng, which is ingested into Splunk Enterprise Security.- Client wants to see xlate / NAT translations in the search of the log- Is the only way to really achi...

Hi I have 2 questions: We have 2 ASA 5525 that are setup for failover. Site A ASA was always the primarySite B ASA was always the secondary Today I logged to Site A ASA and noticed the config had changed to secondary.My first question is: can this ha...

Hi All,Was wondering has anyone bulk deployed rules on an ASA using any scripts. I am generating 10000 plus to secure each communication flow in my environment. Is there anything i need to watch out for? I know one ACE is about 212 B of memory so i s...

What are the CLI commands or where in the FMC can you see if the firewalls lost power "Up Time" or lost network connections to the outside?   We had a scheduled building generator check and some odd things happened that pointed to losing our network ...

Hello Team, I'm unable to take access of gui of ftd 2100 on box, while same I'm able to do ssh my device from same IP.Please help  Regards,Vishal

Hello,We were suggested to disable isakmp Aggressive mode on Cisco Routers and on ASAs due to vulnerability reaso.How will disabling this affect on current VPN connections on these devices? 

I have the below configuration in my ASA firewall-------------------------------------------------------sla monitor 1type echo protocol ipIcmpEcho x.x.x.x interface outsidenum-packets 3timeout 1000frequency 9------------------------------------------...

Alright experts, I need some assistance because this isn't making a lick of sense.  I have a customer running FMC 6.2.2 and AD User Agent 2.3 that is having an issue where a lot of their connection events are showing Unkown under Initiator User.  Som...

I have low space in file system /var/ en my cisco firepower sensor, I validated files with big weight and I found a file in path /var/sf/detection_engines that takes a lot of space (110G): root@SFNGIPSB:/var/sf/detection_engines# du -sh * 110G 5b6306...

Hello , i have one question:I have FMC who controls two devices ( sfr modules on ASA) I need to change NTP server on FMC ( local NTP server). Do i need to change NTP on sfr modules on ASA devices  before changing on FMC, or there is synchronization t...