Network Security

Hi all, 1) I can open the syslog through the System --> Monitoring --> System of a Cisco IPS through the Firepower Managment Centre. The problem is how to download all these log from all the pages? 2) I export the Kiwi syslog from Alert Configuration...

Cisco helped providers with Wi-Fi calling and then didn't give us guidance on how to open ports on Cisco ASA firewalls to support it.  I opened a TAC case and they are clueless.  Can someone get this to a product manager within Cisco to give us ASA g...

Hello,  Can you advise , is it possible to configure Cisco ASA side with Policy Based Site to Site VPN and AWS side Route Based VPN ?  So far I know AWS does support only ROUTE based VPN.

Hello, I trying out ISE device administration, wanted to restrict for a user to send command 'username', so below is how I set TACACS+ profile and command sets. TACACS+ profilepriv-lvl=4 command set  But when I tried to login, command username succes...

Summary  A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload.The vulnerability is due to an internal state not being...

Hello all, I would need some suggestions regarding a configuration I would like to implement.Basically I want to create a New DMZ for a new Infrastructure we are setting up,new DMZ leg in the ASA.Let`s say this DMZ Subnet is configured on the Core Ro...

Is it possible to silence drop events from the IPS? I do not see a way in the policy, unless I am missing something. Looking for option 'drop (but DONT generate event).

We cannot connect from our different logical VLANs but can connect to inside and DMZ zone. Users on my different logical VLANs the (PSN) network cannot reach any of the other PSN network. inside and DMZ is ok they can reach them.   This is already in...

Hello Fellow Networks, I am encountering problems TCP:443 extracting a vFTD v 6.6.0 capture generated whilst in diagnostic-cli privileged EXEC Mode.  vFTD  http services have been stated allowing access from the appropriate subnet:ngfw1# sho running-...

I have a range of IP's which are assigned for Internet facing servers. I had already defined all of my HOME_NET in which I also included publicly addressable internal IPs which I would like to monitor. However I had not added these external facing ne...

Hello, can someone help me configure a whitelist on Firepower to only allow access to netflix.  There's a built-in application filter for netflix's but I get an error.

I have ASA 5585SSP40 one interface naming external and i have interface having zone116 ip address 10.26.X.X from interface external want to connect server 10.92.x.x  but unable to connect and when i see in the logs it is showing like this Deny TCP (n...