Network Security

Greetings, I've recently been tasked with making some of my servers FIPS-compliant.  In the process I've run into a problem accessing my sg500x-48p switch via SSH.  I get the following error: no matching key exchange method found. Their offer: diffie...

Hello Guys, I'd appreciate it if you'd help me out. I have two firewalls, a primary and a secondary in failover mode, 5 days ago I failed the primary and the secondary took the role of active, so far so good. The problem is that the primary/standby d...

Hi everyone,   I can't get fpmc to copy to an sftp server. It's a well tested tftp server and it is currently being used for call manger backups and it has worked for years. All I get from FPMC is this:   Backup Name: test_fpmc_backup_20180321103002-...

I have recently bought a firepower 1010 as an upgrade from my older 5510 that I have. Unfortunately I am unfamiliar with the Firepower device manager and can not for the like of me figure out how to forward port 80 from my outside interface to my int...

Hi experts,our ASA (on FPR) is performing site-to-site IPsec VPN Gateway duties, however, "show asp table socket" doesn't show UDP/500 and UDP/4500 (or ESP). (ASA's interface IP address is used as local VPN Gateway address.)Q1. Is there a command to ...

Hi all,I have increasingly been having issues around two new FPR1010s bought as a cheaper basic set of firewalls to add to our network. I was hoping I could get some advice :) 1) My first FPR1010 I thought I would configure the management port so I c...

Hello, Just looking for some clarity around a deployment we are looking to do for a customer. So Basically they are looking to put in FTD 1140's at multiple sites. We will be looking to configure sub-interfaces on this and then the usual ACL's etc fo...

Is there any dependency on the mounted ISO when deploying a virtual firewall?    Once the firewall is deployed can I dismount the ISO without issue?   Thanks.

Hi Guru's, I was looking to block all domains ending with .bar to block list on firepower 9300. I tried with wildcard 8.bar to block domain list under objects>Security Intelligenec > dns list and feeds but its not working. Probably my version which i...

Hey as the title says, this is my first IPSEC tunnel I've set upit seems like almost everything is good and I have the tunnel active but I cant ping remote hosts I swear its like on config off from workingso very simple set up here at my house (GFIRE...

HiI have a ASA running a very large config (22000 lines) and around 950 interfaces (via port-channel). It is running on a firepower 4140. The port-channel are two 10G interfaces and the failover link/state is running on its own 10G interface. Http re...

I recently created python scripts that can create or delete host objects.I received a lot of help from this community in getting them working. Therefore I'm making them available to the community to say thanks. Hopefully they will help someone in ret...