Network Security

Hi Guys, Im replacing an ASA 5510 which is currently acting as the secondary in a failover setup.Cisco has recommended me with ASA5516.Is there any need of additional licenses to be purchased along with AASA 5516 ? This is my current licenses in the ...

Hi Experts,  We are configuring SNMP on our Firepower-2130 from Firepower management Center(FMC) GUI for Integration with NMS tool. --> Configured SNMP receiver (i.e. NMS Server IP) , SNMP Version : 2 , TRAPs, Assigned a Interface as well.All details...

Hello, Currently I am running FMC 4000 with 6.4.0.4 ( Build 34 ). Planning to Patch FMC so that I can remove below both Vulnerability 1. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191112-asa-ftd-lua-rce ----where...

We have a tunnel from our main office to our DR site.  We have Veeam replication jobs to this DR site and during a job I noticed we are losing packets.  Our data center provider saw that we were hitting the 40mbps Policer set on their equipment.  We ...

I am newbie to the firewall config arena. I have an ASA 5510 that I have created a basic config for to access the internet. I am connecting to the firewall through the LAN and I am able to ping it and access the config via the ASDM. If I console in I...

Hello Experts, I would like to know: 1) What are the best practices while deploying Cisco Firepower (FTD / IPS) in standalone/ HA/ cluster? Sometimes it just look like the boxes can't handle traffic no matter the design (I may be wrong but we mostly ...

I am trying to block IKE traffic incoming to the ASA using ACL applied on control-plane but it doesn't seem to block those requests.Below is my config:object-group network IPSEC_TUNNEL_IP network-object host 1.2.3.4 network-object host 2.3.4.5 acc...

I need to remove one line of code in a Cisco 2811 router, without removing the entire ACL. I'm used to making these changes in firewalls, but have figured out it's a little different in the router. Can someone provide me with some instruction? I hear...

When filtering snort rules by Microsoft Vulnerabilities category the CVE numbers only go up to CVE-2017-022 ? Is this a bug or missing an update ?From the FMC Object>Intrusion Rules>Priority>server-webapp.rules (3818)>Rule Documentation (1:52130:1) f...

Hi,I am hardy consider to know that how would be possible to block some IPs in a network?shall I block the IPs using firewall, if I'm right how should I use with API?I'm new with this topic, but I will appreciate your answer to inform me.Thanks

 We have an asa 5512 with a 100Mb external line connected to port 1/1. Connected for internal we have 2 networks on 1/2 and 1/3. The issue we have is users keep maxing one of the networks restricting the other one. How can we limit interfaces 1/2 and...

I am trying to get one of my servers access to microsoft updates via the application filtering. However, I think that it is not working because of no DNS capabilities. We want to point their DNS to Cisco Umbrella which I have created as objects. Can ...

Firepower v6.0 - Files policy - Is it possible to add new file types/extensions?    How can this be accomplished?   Thank you.