Network Security

My firewall has configured for 3 iPs1- for 0 port 10.80.xx.xx2- for 1 port 10.80.xx.xy3- for firewall itself 10.80.xx.xzBut i am able to ping from other ips also why?  Can we asign more iPs to 1 port of firewall to allow more iPs to data access

Dear all, Dynamic reverse route injection (RRI)  is available for IKEv2 policy-based IPSEC VPNs (static crypto maps).  However with IKEv1 it is only possible to configure static RRI. Does anyone know what we could do on IKEv1 (with static crypto maps...

Hi, I have a bunch of 5525-x running 9.8.2.20 and starting to upgrade them, the first thing I do is update the ASDM version & check it works.  So when I enable ASDM 7.13.1 as the current image, it works, says it needs to upgrade the launcher on my PC...

So on our routers I can do a "show policy-map interface gi0/0", and it will tell me the current QoS usage on that interface with our policy. Is there a way to do that on an FTD? Attached is a picture of the QoS policy we have for our guest subnet at ...

Hi Guys, Im replacing an ASA 5510 which is currently acting as the secondary in a failover setup.Cisco has recommended me with ASA5516.Is there any need of additional licenses to be purchased along with AASA 5516 ? This is my current licenses in the ...

Hi Experts,  We are configuring SNMP on our Firepower-2130 from Firepower management Center(FMC) GUI for Integration with NMS tool. --> Configured SNMP receiver (i.e. NMS Server IP) , SNMP Version : 2 , TRAPs, Assigned a Interface as well.All details...

Hello, Currently I am running FMC 4000 with 6.4.0.4 ( Build 34 ). Planning to Patch FMC so that I can remove below both Vulnerability 1. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191112-asa-ftd-lua-rce ----where...

We have a tunnel from our main office to our DR site.  We have Veeam replication jobs to this DR site and during a job I noticed we are losing packets.  Our data center provider saw that we were hitting the 40mbps Policer set on their equipment.  We ...

I am newbie to the firewall config arena. I have an ASA 5510 that I have created a basic config for to access the internet. I am connecting to the firewall through the LAN and I am able to ping it and access the config via the ASDM. If I console in I...

Hello Experts, I would like to know: 1) What are the best practices while deploying Cisco Firepower (FTD / IPS) in standalone/ HA/ cluster? Sometimes it just look like the boxes can't handle traffic no matter the design (I may be wrong but we mostly ...

I am trying to block IKE traffic incoming to the ASA using ACL applied on control-plane but it doesn't seem to block those requests.Below is my config:object-group network IPSEC_TUNNEL_IP network-object host 1.2.3.4 network-object host 2.3.4.5 acc...

I need to remove one line of code in a Cisco 2811 router, without removing the entire ACL. I'm used to making these changes in firewalls, but have figured out it's a little different in the router. Can someone provide me with some instruction? I hear...

When filtering snort rules by Microsoft Vulnerabilities category the CVE numbers only go up to CVE-2017-022 ? Is this a bug or missing an update ?From the FMC Object>Intrusion Rules>Priority>server-webapp.rules (3818)>Rule Documentation (1:52130:1) f...