Network Security

Hello, Hoping someone could offer a creative or easy solution to a problem I experienced this morning.  We have an ASA5516 running 9.8(3)29.  It has a dedicated internet connection connected to Gig1/1 and layer 3 switch on the INSIDE interface.  The ...

Hey Guys, we are having an issue tuning our FMC.  What we are wanting to accomplish if possible. is to send all firewall logs to a SEIM server.Firepower Now we have the firewall pointing to our SEIM solution, but we are only able to extract internal ...

We have configured the FirePower to send syslog messages via the Action Alerts, it seems to work initially however after a short period of time the FirePower stops sending messages to the server. The logs are still being generated as we can still see...

Buen dia. Necesito una solucion para un negocio pequeño, necesitamos hacer que en nuestra red wifi, se quede registrado todo lo que los usuarios hacen en internet, supongamos que x usuario entra a una pagina www.google.com, y despues de ahi coloca un...

Hi I have Cisco ASA 5506 and I used to be able to connect to the asa via asdm, always working, but today I was told to hardening the asa, so I disabled the TLS 1.0/1.1 only allow TLS1.2, see below command  ssl server-version tlsv1.2ssl client-version...

Running Sourcefire version 6.2.3.4-42, and getting URL Filtering Download Failure when Safe Search is used in my Access Control Policy Rule. The rule is set with an IP range that is well above the IPs of the server, FMC, or the ASA. The only way I ca...

 We have a ASA5506-X running 6.2.2.  After setting up a 1to1 NAT Rule for a SIP Trunk today we are now in a state where the ASA won't complete the FTD Init.   We are getting this message at the console over and over. /ngfw/usr/local/sf/bin/pmmon.sh: ...

Can you simply add a new host or create a new object-group and add all the source hosts in the IPSEC profile on ASA without breaking anything assuming remote end has allowed the new host?

So if I have a IPSEC connection allowing let's say local source addresses 10.10.10.10 and 11.11.11.11 to remote end of tunnel 100.1.1.1, and want to add 12.12.12.12 as an addition source host on my local end, do I just make the update under "Local Ne...

hi i am configuring my Cisco Firepower 4120 appliance. it has the 6 port FTW module. in the GUI, i see bypass state enabled for ports 3-4 but it says disabled for ports 1-2 and 5-6 and i dont see an option anywhere to enable it. where is the opt...

I cannot seem to find the snmp community settings on my ASA. I am using NGFW Version 6.2.3 not managed by the FMC. I would bring it into my FMC but it is remote ASA and to bring it in I would have to configure another router to pass my vpn traffic un...

trying to restore a backup to a virtual FMC running 6.4.0. My VDB matches and so does the FMC version in the backup. The error is "Rule Update UI Components version mismatch". I can't find any information on this in the documentation or on the web, a...

I have a ton of sites running ASA with firepower on 6.2.3.14. Looking to get some firepower 1010’s that require the fmc to be 6.4. Anyone running 6.4? Any major issues? Is it stable?

Dear Expert, I have deployed anyconnect on outside interface. But when i want to connect the anyconnect, the connection is timeout. No response. Even i brower the IP address on web, still no response. I suspect the outside interface deny the incoming...