Network Security

Hi AllI need clarification on the following.For our Internet Access we have two firewalls in line as follows."Internet Router"---"FTD2110"---"Second FW"----"Internal-LansOn FTD our ACP policy Inbound rules "permits" specific destination IPs and ports...

Hi, i do have an ASA 5585X Cluster (clustermode) with four members and need to increase the mtu-size of the clusterlink to 1600.jumbo-frame reservation ist already configured.is the change of the mtu size disruptive or non-disruptive? can i do this c...

Hi All,As you may or may not be aware there is a limit of 10000 entry's in the "File List" specifically used for uploading SHA's.Does anyone know a way around this ?Like many people we use this a lot as we manually upload txt files with SHAs in that ...

I need to know what is the maximum fo ACE (ACL entries) into the Firepower 2100. Could someone help me?

HiI've previously had problems with 5512-Xs running ASA having an ACE limit of 100K. Is ACE a relevant limit for 5516-Xs running FTD 6.4.0.4? What about FTD 2110? I've read somewhere the limit is 200K for ASA 5516-X running ASA code but nothing speci...

Hi Team    Quick question please , if I have a customer running ASAv and they want to run service reflection , is this supported , I cant find it anywhere in the config guides ?   Thank you    Julia 

Hi,I am facing an issue with URL filtering vs IP Address filtering rules, as the title suggests. Let me elaborate more on the issue:We are using ASA with Firepower Services, managed through an FMC. The two rules at the top are the following:1. Source...

Hello all,Just want to bounce this off you... Today during an upgrade of a server I changed the physical server with a new server. Same IP address and an updated version of Zimbra mail. However, after I moved to the new server (Centos7) I am unable t...

Hi all, I have a question about a scenario for which I could not find a detailed answer in any Cisco documentation.- Let's say we have an FTD device managed by FMC.- We have AnyConnect set up, being authenticated via LDAP (AD) with a set-up Realm.- U...

As it is right now I block all STUN traffic.  However there is a legitimate use case for it.  What is the recommended secure way to handle STUN traffic.  Can it be man in the middle-ed like SSL or are there other options to securely inspect the traff...

Can someone please confirm if the Firepower user agent 2.4 supports TLSV1.2? I disabled TLSV1.0 in my Windows Domain Controller 2016 and I'm not getting any mappings anymore, thank you.

Hi,We have Virtual ISE Installed and Looking for Its licensing.I can see   ISE-VM-K9 in UDI Information. Is this ISE or ISE PIC and what licenses I needs.Are the licenses free or paid.

Hi. Is there any equivalent to the CISCO IOS archive? Something like: archive log config logging enable logging size 200 hidekeysnotify syslog contenttype plaintext path scp://user:pass@1.1.1.1/$h-$t write-memory