Network Security

Hi, I edited  the default policy  for ikev2 ( it is done for ipsec site to site vpn policy )The below is before editing crypto ikev2 policy 1encryption aes-256integrity shagroup 5prf shalifetime seconds 86400 and the below is after editing  crypto ik...

Hello, everyone. I nee clarification about one thing. We are using FTD devices on out corporate network for RA ans S2S VPNs. FTD has one interface for internet and one WAN interface leased from SP for 3rd Party companies. Currently we have one site-t...

Hi Friends, I have gone through the web and found that ASA 5555 FTD comes with a default 2 context license. so my query is as below. can we create two context admin+2? or we can be able to create admin+1? my requirement is to create 2 customer contex...

HelloIs there a CLI command to obtain unused objects on the FMC?We are using FMC with firmware 6.4.0.4Right now the FMC has nearly 18,000 objects and we need to eliminate the ones that are not used. Regards 

during vulnerability scan on my hardware router.SSH Server CBC Mode Ciphers Enabled and SSH Weak MAC Algorithms Enabled appears on the reportRecommendation are to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption and di...

Hi, needing help here, I have setup a pair of 1841s site2site with static IP at HQ and dynamic IP remote.  PC and a Cisco 8861(with a PoE adapter) behind the 1841 all work fine. Then I took an ASA5505 (want to use its PoE port), setup as remote dynam...

Hello, I am sending this message because I am in trouble to configure a backup IPSEC VPN over internet with one of my client. Indeed, we currently have a working VPN between my ASA firewall and my client Cisco router. In order to get redundancy, they...

Hello I am having an issue with one of our firewalls locking up and I figure I would ask here while waiting to get an issue with my support contract worked out. This is an ASA 5516X with firepower running 9.6(4). So far this has happened twice and th...

Hello Members,i just ran a NMAP scan on the outside interface of a ASA 5520. It seems that the TCP Ports 7070 and 554 are open on all NAT interfaces and the outside interface of the firewall. I tried telnet on port 554 and 7070 and got connected.Any ...

All:   I had originally posted this question last weekend, and several people responded with the answer. And I wanted to thank them,.  However, I accidentally deleted the original post while trying to move it, so here is for the great brain-trust in ...

Hi all, We inherited a CSM deployment that is in need of an upgrade. Below are the details: Windows Server 2012 R2 CSM 4.9 SP0 What is an acceptable upgrade path? What is the latest stable version of CSM? Thanks in advance,

I have a Cisco 5506-x (5 VLAN limit) and a Catalyst 2960-CG.  I want to create about 15 VLANS.  I was wondering if i could just create these on the Catalyst 2960-CG and not create them on the ASA or would I need to create them on both and have more V...