Network Security

Hi guys, I have upgraded an FMC 2500 from 6.4.0.4 to 6.5.0.2 and the performance in unbearable.Neither the admins nor the analysts can work efficiently due to low response of the system.I have a new warning notification alerting me about the size of ...

Good MorningMy team recent received ASA 5506.  I'm currently in the process of setting one up for scanning and ran into some issues.  I can not get the thing to pass traffic.  I can piing the inside  from the inside network and outside from the outsi...

I used to be able to view the "ASA FirePOWER" tab on the bottom left hand side of the Configuration once I log in to ASDM however, now it disappeared. I cannot see the 3 tabs anymore (see attached). I can still log in to the FirePOWER using putty and...

Hi, I have a bunch of 5525-x running 9.8.2.20 and starting to upgrade them, the first thing I do is update the ASDM version & check it works.  So when I enable ASDM 7.13.1 as the current image, it works, says it needs to upgrade the launcher on my PC...

Hi Guys, Im replacing an ASA 5510 which is currently acting as the secondary in a failover setup.Cisco has recommended me with ASA5516.Is there any need of additional licenses to be purchased along with AASA 5516 ? This is my current licenses in the ...

Hi Experts,  We are configuring SNMP on our Firepower-2130 from Firepower management Center(FMC) GUI for Integration with NMS tool. --> Configured SNMP receiver (i.e. NMS Server IP) , SNMP Version : 2 , TRAPs, Assigned a Interface as well.All details...

Hello, Currently I am running FMC 4000 with 6.4.0.4 ( Build 34 ). Planning to Patch FMC so that I can remove below both Vulnerability 1. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191112-asa-ftd-lua-rce ----where...

We have a tunnel from our main office to our DR site.  We have Veeam replication jobs to this DR site and during a job I noticed we are losing packets.  Our data center provider saw that we were hitting the 40mbps Policer set on their equipment.  We ...

I am newbie to the firewall config arena. I have an ASA 5510 that I have created a basic config for to access the internet. I am connecting to the firewall through the LAN and I am able to ping it and access the config via the ASDM. If I console in I...

Hello Experts, I would like to know: 1) What are the best practices while deploying Cisco Firepower (FTD / IPS) in standalone/ HA/ cluster? Sometimes it just look like the boxes can't handle traffic no matter the design (I may be wrong but we mostly ...

I am trying to block IKE traffic incoming to the ASA using ACL applied on control-plane but it doesn't seem to block those requests.Below is my config:object-group network IPSEC_TUNNEL_IP network-object host 1.2.3.4 network-object host 2.3.4.5 access...

I need to remove one line of code in a Cisco 2811 router, without removing the entire ACL. I'm used to making these changes in firewalls, but have figured out it's a little different in the router. Can someone provide me with some instruction? I hear...

When filtering snort rules by Microsoft Vulnerabilities category the CVE numbers only go up to CVE-2017-022 ? Is this a bug or missing an update ?From the FMC Object>Intrusion Rules>Priority>server-webapp.rules (3818)>Rule Documentation (1:52130:1) f...