Network Security

Hi everyone, I am trying to configure alarm for failover via SNMP, but cannot find the appropiate OID with which I can do this.I have similar configured for ASA-5525 with OID 1.3.6.1.4.1.9.9.147.1.2.1.1.1 and is working.But on the FTD I don't find th...

Hi, I am enabling IPS poly with "Balance Security and Connectivity" in our production environment. This IPS enabling is not going to break anything in production environment right and will only generate intrusion events. Even it sees a malicious traf...

  Hi all, Could somebody please advise how do I fix the below vulnerability issue as I couldn't find any solution for it. Is this vulnerability a concern?   Vulnerability Description -------------------- An NTP control (mode 6) message with the UNSET...

How can I configure ISE admin access to authenticate from RSA (external identity source), but then authorize base on AD group membership? When I set the authentication to the RSA Server, it does not permit me to change the Admin Group setting to an A...

I have a multi context ASA with several subinterfaces ..due to an architectural change i need to migrate 3 of its subinterfaces of a context and the related traffic to a new FTD Firewall.. Is it possible to do selective Migration ? i only want to mig...

Hello, Is it possible to change the source address for the FTD appliance (managed by FMC) so that it sources from the inside address which is allowed over a s2s tunnel, rather than the public IP? If so, is there an example out there? I want to send s...

Hi,we are using a Firepower 2100 series in Version  6.4.0.6 and Anyconnect for RAS Client Login.So as users opens database connections to our Oracle Servers, they will get an automatic disconnect from ORACLE after, i think 15minutes not using the ORA...

There is a Firewall Rule from 10.1.1.29 to 10.7.3.220 on tcp 445 port. When Checked from FMC GUI Log it does not show any log from 10.1.1.29 to 10.7.3.220 on 445 port. Rather we see traffic from 10.1.1.29 to 10.7.3.220 on port 135 from FMC GUI. Howev...

Hello,I'm currently testing pair of FMC 4500 in HA (6.4.0.8-28 upgraded from initial 6.2.1) before introducing into production and I'm facing some issues. On the active unit I scheduled to run daily backup of the FMC configuration to the remote stora...

helloi bought cisco  asa 5506-x with firepower from ebay and i do not get the pak key and the fire dont has any license no control or protection or any other license how can i get license even for training purposes thak you all

Hello,  We recently upgraded our 5545-X ASA with 1120 FTD's. I am now left with 3 5545-X units that I am unsure of how to repurpose. I'd hate to recycle these or keep them in storage since they are still high end and current. Does anyone have an idea...

I am trying to clean up the NATing to setup a VPN, but the Nats are overwritting the no nat statements. I am trying to clean them to by adding the source dynamic any interface. The firewall is wanting me to remove them, and I cannot find anything onl...