Network Security

Hello,   I am trying to filter DNS request from VPN Clients calling for "_cisco-uds._tcp.*" but when I did the obvious from the Connection Events Tab and trying to add the domain to the global blacklist it says that it is an invalid domain. Privious...

Hello,   I need to perform an FXOS upgrade on our FPR4120 nodes which are configured as a cluster. (as preparation to upgrade FTD) According to the documentation:  I have to start with the slave node then switch master/slave roles and then upgrading ...

Hi All,   We currently use a variety of ASA's of the 5512,5515 and 5516 variety to segregate non internal networks. These inner firewalls run DHCP Relay to our DHCP servers in the inside network, so DHCP requests would leave the relevant device, trav...

Trying to load a config. We login to the device, enable and conf t.  None of the commands are working. We just get an errorERROR: % Invalid input detected at '^' marker. And nothing in my config is there. Example commands would be ip, name, etc... Th...

Hi All   Just curious if anyone has encountered the similar situation before. I have configured the FMC's Management/Audit logs to be sent to a SIEM via syslog.   (System > Configuration > Audit Logs)   The problem I have encountered is that the user...

I upgraded my FTD firewalls to 6.3 and the old configuration for getting traceroute to work is no longer valid.   Does anyone know how to get traceroute working on 6.3+ code?

Hello experts, I am migrating from SRX to ASA5516-X and I need to apply a lot of configs to the new box (network and service objects). I searched online to find a solution to my problem but unfortunately nothing came up. The cli is usesless and web u...

From the ASA, if y ou do sh crypto ikev2 sa, it show the following below. Are all the child SA just allowed subnets on the tunnel?     Session-id:2758, Status:UP-ACTIVE, IKE count:1, CHILD count:14 Tunnel-id Local Remote Status Role1682665127 X.X.X.6...

Running a debug but for a particular IPSEC VPN shouldn't cause much of a degradation and/or impact on performance correct or possibly?   The following is all I would need to enter? debug crypto condition peer www.xxx.yyy.zzz        

I have a client that keeps receiving the following syslog error:ASA %ASA-3-210007: LU allocate xlate failedIt has been identified in bug report:CSCsi65122 (http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId...

Hello I want to Create VPN  over ASA with this attribute (IPSEC IKEV2 RSA ) , i want to used Android Tablet as Endpoint, what the ASA config can help me in this case ?and what the Steps that's can flow to complete config on Android tablet ?and where ...

Hello,So i am new to firewalls and i have got this question from one of our users "We have had issues with our proxy service and they have asked us to check the below. Which firewall you are using upstream? Could you confirm if you have enabled SSL d...