Network Security

I wanted to implement FirePOWER rules based on AD groups so I installed and configured the FirePOWER User Agent. But it seems like the dual stack network ruins this solution, the AD authentication that is picked up by the User Agent and sent to FireS...

I have a FTD 9300 already added to FMC.I need to change the device certificate but I am struggling to find in the documentation do I need to add the device certificate on the FTD 9300 first and re-add the device back to FMC or it can be done directly...

Dear all, Can someone advise what is the difference between ASR-Group Vs Traffic Zones?We have 2 ASA in active/active state.We are using one Security-Context that has 2 outside sub-interfaces each with a transport VLAN.on each sub-interface we have o...

Hi Folks, I have seen some unexpected behavior on an ASA with EIGRP but not sure if this is the norm for the EIGRP process on the Firewall (or router in general). Under the EIGRP Process on a firewall there are no redistribute / route map commands an...

I have a customer that needs to support 20 managed devices under vFMC (VMware)..Is it possible to use 2 x 10 device SKU(s) to accomplish this, and essentially "stack" these together ? Meaning 10 + 10 would yield me 20 vFMC managed devices.. Or is vFM...

Hi All, I have a site to site vpn established between ASA5525-X firewall & Meraki MX84 security Appliance Configuration:ASA endPhase 1:Encryption: AES 128, Authentication: pre-shared key, Hash: SHA1, Group:2, Life time:86400Phase 2:Encryption:esp-aes...

Hi, I am trying to configure the following SNMP traps on my FTD and FMC devices Traps;Environment traps; Power supply failure, Critical CPU temperature, Fan failureResource traps; Memory threshold reachedCpu Utilization traps; Cpu Rising threshold re...

Hi guys, it has been a pain and a year long ongoing process to get Cisco to implement (sorta) switched ports into the ASA 5506. Most of us probably use the 5505 for small branches due to the fact it has a built-in switch. Now while we were all exited...

Can't lookup report from threatgrid after SFR malware hit, FMC 6.3.0.2.  Anybody else seeing the same thing after clicking the score in file trajectory?  This happened morning of 4/25 also.  TAC mentioned an outage.  

Hey everyone, I'm wondering if it's possible to do port forwarding for incoming traffic on a public IP address assigned to the WAN port on my RV320, but to have the traffic sent to a LAN IP, but on a DIFFERENT port. Fore example, the RV320 has WAN IP...

Does anyone have a list of features still not supported on FTD 6.4? I looked in a lot of the documentation and can't find it. Thanks!

HI all, I have Site to site vpn established between meraki MX84 and ASA 5525.sometimes one of subnet in crypto ACL is getting disconnected from tunnel from meraki end as well as asa end. Thanks in advance.