Network Security

Hello, I am trying to review back my ssh config. I tried to generate a set of crypto keys using a different label (not default)  #crypto key generate rsa label ADE modulus 1024 noconfirm ssh doesnt seem to work until I use#crypto key generate rsa gen...

I am a little over my head here and don't really understand all the changes.  I am looking for a resource to help me take the 5505 configuration into my 5506X.   Specifically what aspects of the 5505 config have to be changed to use it in the 5506X. ...

Hi All,   I have a need to deploy an HA pair of ASAv in Azure.  I've read the Deploy ASAv on Azure Cloud document and I understand that the ASAv is required to have interfaces in four subnets, not including the Azure GatewaySubnet.   My Azure Virtual...

I've been considering whether to re-flash my ASA5506 with FTD, but I do not have an FMC and so would need to do all configurations on-box using the FDM. In the documentation here: https://www.cisco.com/c/en/us/td/docs/security/firepower/620/fdm/fptd-...

Hi there experts :)   Long waited feature is finally out,but info about is very hard to find so i'll try getting some answers here.   I have a project that involves very large number of contexts - 200. Mainly for purpose of dividing routing tables. I...

Hi Folks, I recently had a power outage at my office and after the power was restored, my ASA 5506 has gone on the fritz.   I am able to console and get to ROMMON, I see the output below but I have no idea how to decipher this, would appreciate any h...

Hi friends.we have bought the ASR1001-X router with adventerprise and ipsec (FLSASR1-IPSEC) license.now that we check the licenses we have problem with ipsec license.the status of ipsec license in "sho license all" is : StoreIndex: 1 Feature: ipsec V...

Hi,I'm designing a mid-size network for about 100 users on two high latency links (Cell/SAT). First I looked at having a ISR 4221 router with a ASA 5545-X Firewall to let the router handle the routing etc. and the firewall to do the DPI, AVC, IPS etc...

Hello   Can someone enlighten me when to append no-proxy-arp route-lookup for the identity manual NAT/NAT Exempt for 9.9? Or is there a best practice for this?

After doing upgrade from 6.2.3.5 to 6.2.3.7 for 2100 series FTP box failover pair new FXOS alarm showed up:   Severity: MajorCode: F1329Last Transition Time: 2018-12-06T17:20:52.586ID: 555499Status: NoneDescription: Ntp Configuration failed, please c...

Hi. I have just configured firepower file policy that is responsible for just detecting any file and block only encrypted archives when they pass through firepower.But when i send encrypted archive from one vlan to others it is either send or blocked...

Hello,Today we have tens of FWs 55xx-X and IPS (SFR software modules) in our infrastructure.I use ASDM to manage the FWs and FMC for IPS.I am now interested to use Cisco Security Manager to manage FWs instead of ASDM because of its global management ...