Network Security

Hi Friends, I have gone through the web and found that ASA 5555 FTD comes with a default 2 context license. so my query is as below. can we create two context admin+2? or we can be able to create admin+1? my requirement is to create 2 customer contex...

HelloIs there a CLI command to obtain unused objects on the FMC?We are using FMC with firmware 6.4.0.4Right now the FMC has nearly 18,000 objects and we need to eliminate the ones that are not used. Regards 

during vulnerability scan on my hardware router.SSH Server CBC Mode Ciphers Enabled and SSH Weak MAC Algorithms Enabled appears on the reportRecommendation are to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption and di...

Hi, needing help here, I have setup a pair of 1841s site2site with static IP at HQ and dynamic IP remote.  PC and a Cisco 8861(with a PoE adapter) behind the 1841 all work fine. Then I took an ASA5505 (want to use its PoE port), setup as remote dynam...

Hello, I am sending this message because I am in trouble to configure a backup IPSEC VPN over internet with one of my client. Indeed, we currently have a working VPN between my ASA firewall and my client Cisco router. In order to get redundancy, they...

Hello I am having an issue with one of our firewalls locking up and I figure I would ask here while waiting to get an issue with my support contract worked out. This is an ASA 5516X with firepower running 9.6(4). So far this has happened twice and th...

Hello Members,i just ran a NMAP scan on the outside interface of a ASA 5520. It seems that the TCP Ports 7070 and 554 are open on all NAT interfaces and the outside interface of the firewall. I tried telnet on port 554 and 7070 and got connected.Any ...

All:   I had originally posted this question last weekend, and several people responded with the answer. And I wanted to thank them,.  However, I accidentally deleted the original post while trying to move it, so here is for the great brain-trust in ...

I have a Cisco 5506-x (5 VLAN limit) and a Catalyst 2960-CG.  I want to create about 15 VLANS.  I was wondering if i could just create these on the Catalyst 2960-CG and not create them on the ASA or would I need to create them on both and have more V...

Hi Support, Could you help to investigate the error attach below？Previously my firewall is working fine, but this incident happen frequently right now. Thanks & Regards,CK

Dear All,   I want o restrict the RAVPN in cisco FTd based on the Geo location,  

Hi Cisco IOS SMEs, there have been some prior posts on this subject, but they are very old and relate to much less recent IOS versions:here: https://community.cisco.com/t5/firewalls/zbfw-quot-sip-protocol-violations-quot/m-p/1251998 I am running IOS ...

Has anyone gotten VPN failover to work on Cisco FTDs (not ASAs with backup peers)? Here's the scenario, we are trying to setup two FTD 2100s in a HA pair for failover of not only the Internet but for S2S and RA-VPNs as well. So far we can get the Int...

Hi All, I'm looking at hardening the https server for a number of Cisco devices including IOS-XE for Cat9k switches and WLC. Looking at the devices I can see that the following Cipher Suites can be supported but I'm not sure what the current recommen...