Network Security

I am working on securing the WebVPN (AnyConnect SSL VPN) portal on a Cisco FTD managed via FMC. The current Content-Security-Policy (CSP) header includes weak directives like 'unsafe-inline' and 'unsafe-eval', which expose the portal to potential XSS...

Hello,I'm facing an issue with network connectivity between two firewalls. Here's the setup:Backend Server IP: 10.96.16.245Backend Firewall (Cisco ASA): The default gateway for 10.96.16.1VPN Firewall (Trust IP): 10.96.18.240Problem:From the Backend S...

Hi, we are going to move our offices between buildings. Our ISP is able to provide us L2 1gbps QinQ line between buildings for 2 months so we can start moving services and servers partially. The thing is that L2 is not encrypted anyhow from them. We ...

Hello everyone,We noticed there are computer objects corresponding to our cisco firewalls in the default computers OU of our AD. I'm guessing this was created with the realm configuration we did in the FMC.My question is, can we move those object to ...

Hi!Can someone please tell me the commands to setup asa 5545 x ? they are different from the 5510 i had an i can't configure it.

Hello colleagues, I have experienced the IPsec (Phase 2) session hang issue several times with different clients.Customers have been contacted with the problem that the tunnel is in an active state, but traffic is not passing through it.Attempts to r...

I have Ubuntu 20.04 and Snort3 installed and run well in detecting some type of attackes using the required rules. Now I want to use SnortML and just want to see how it can be used in my invironment to detect an attack that it should be pre trained o...

I need to lock javada1.oracle.com, javadl-esd-secure.oracle.com, java.com and java.net.Can I do this using a FQDN object and a deny access rule?  What is the process for blocking subdomains with the ftd? 

Having hardware issue. not powering on.

This same issue affects my FPR-2110 attempting to upgrade from 7.0.1-84 to 7.0.7-519 or to 7.2.7.500. The system always reboots in a rolled back state without the upgrade having completed.As the work-around seems to suggest creating a new cert, any t...

Unable to authorize access. If you continue to have difficulty accessing this device, please contact the system administrator. Have erased config 5 times, waited the hour for the system to reboot. 'connect ftd' and local management. I have changed my...

I'm in a situation where I need to change the port used for Syslogs from the FMC to a server on the same subnet.  I was able to change the port with the SFR modules w/o any issues, and I know I can't change the port in the GUI for the FMC itself, but...