Network Security

I have two ASA 5525X in a High Availability (Active/Standby) configuration both running Firepower services licensed on both for IPS, AMP, & URL. I'm managing both ASA FTD's through a virtual FMC. My question is: Do I also need to configure the High A...

Hello All, I am trying to get a general repository of logs from our security appliances to a syslog-ng server. I have managed to do so successfully for all our ASA firewalls, but I cannot get logs from our Firepower appliances to populate to syslog-n...

Hi,I have set up a new VPN tunnel to a remote site, but the tunnel will not come up.Running packet-tracer shows that the tunnel is failing with:Phase: 8Type: VPNSubtype: encryptResult: DROPConfig:Additional Information:Result:input-interface: insidei...

Hi all,I cannot install the SSL certificate we purchased onto my ASA. Here are the messages I'm getting:Can not select my public key (ssl.key)Received General Purpose certificate for signature keypairDo you wish to accept this certificate? [yes/no]: ...

Hello everyone,I have Cisco ASA 5525-X with following imagesasa922-4-smp-k8asdm 7.2(2)1asasfr-5500x-boot-5.4.0 I need to deploy the firewall in Datacentre environment. For this purpose , i want to create zones/zone pairs and assign interfaces to diff...

Hi Community, I am new with Cisco firewall and need some advice on the network diagram. We will deploy 2x ASA firewall 5516 with Firepower for external and internal. We will use SG500-X switch in the network for DMZ and LAN. Based on the diagram and ...

Hi All    Really struggling to find an answer to this which is strange.    Weve got got a couple of ASA’s with Firepower module on.   the firewalls themselves have got Certs installed from m our CA so we don’t get cert warnings. However I’m still get...

If you get a notification saying "Error in saving certificate: status = FAIL" when installing an SHA-256 certificate, this means that the SHA-256 algorithm is not supported. how to resolve this error please update me 

Hi all, I need to setup FMC in HA through the FW environment. I went through the configuration guide and cannot find clear confirmation which ports I need to open on the FW to allow HA communication. Is it just TCP 8305 listed in the configuration gu...

Hi Folks, Wondering if you can help me solve an issue. We are using split tunnel mode and I have some specific IPs that are going over the VPN i.e 10.0.0.1/24, 172.16.20.1/24. My Client IP assignment is issuing the clients IPs from 192.168.1.1/24. So...

Dear community,I would like to ask you for a help with following topics1. We have setup automatic email alerting on our FMC in case intrusion event or malware event is detected.below is an example of **Auto Generated Email** alert for detected intrus...