Network Security

I have a few hundred 891F routers with IOS IPS enabled.  We used to update signatures using CSM.  Now I need to convert them to auto-update. I have not been able to find any working examples of updating signatures by specifying "url" instead of "cisc...

I have two ASA 5545 running 9.7(1)4. They are an active/standby pair. Failover on all interfaces is working except for one. I am getting repeated log entries every few seconds for this interface of:ASA-1-105008: (Primary) Testing Interface "Interface...

Want to know Cisco bug CSCur60060 is corrected in ASA version 9.4 or not? Can someone please help in this. Thanks!!

Hello. What is difference between CON-SNT-A15K9 and CON-SNT-A15K8. This is contract for cisco asa 5515-x. If i understood correctly, K9 means that the device supports encryption aes/3des. And K8 - only des encryption.And if i can see smth like this  ...

Hi,currently our FMC and modules are running on 6.2.3.9 version.I can see that newest version is 6.4.0.2.How can we do an update to newest version, do we need to do it version by version or we could skip some?I guess that we can't go just directly to...

I am trying to set up an AD realm.  The directory test passes and I think I have the realm config correct, but when I try to user download, the job completes but finds no users or groups.  I have the base and group DN set for the top of the tree (a v...

Hi, I have a customer looking to use FPs as their VPN head-end devices but I cannot find any throughput figures (probably as the feature is relatively new).IPSec throughput information is readily available.The Performance Estimator only provides IPSe...

Dear Experts, Good morning, we have requirement where users are granted remote access VPN via L2TP using microsoft native client. We want to enable 2FA for remote access VPN. As per the reading it seems that we need to go for thrid party 2FA solution...

Hello Experts, I have 2 x FTD2110 configured in HA and they managed by FMCv. Both FMC and FTD are running on code 6.2.2. I have configured a PBR with 'match list' and a 'set next-hop' command and was able push the flexconfig to FTD successfully and P...

This is really a weird one.  I have a VPN tunnel, up/online between ASA5525-X and ASA5505.  The problem I'm experiencing is on the ASA5505 side. The protect network, these are not actual adresses, 192.168.1.0/24. Very small 4 host that are statically...

Hi,I want anyone able to get an IP address from the corporate network, that does not have the Proxy client on the machine, to go via the Proxy web site when using www or https. I have a router facing the ISP and the firewall behind the router providi...

I'm installing a new ASA 5510.  I tried to configure a simple setup and get that working before I deal with DMZ and VPN.  I can't even get our internal subnet to access the internet on the outside interface.  My internal subnet is 192.168.0.0/24 and ...

I am new to Firewall management and need help with the following ports on my ASA 5508-X Firewall. Thanks in advance! Port Direction TCP UDP Usage 22 Out Yes No Technical Support Services 25 In/Out Yes No Email and ...

Hi All,Can someone explain how the ASA uses the standby IP in a Active/Standby config. I have always configured the devices like this as per cisco design. Tried to look into this further but unable to find a definitive answer. When the PRIMARY fw fai...