Network Security

Firepower 9300 Series - ASA logical node - Single context to Multiple context deployment with OSPF and BGP

Hello! When resetting ASA to default and after restoring configuration and set it to work, I've found out that bootvar command output is empty. Result of the command: "show bootvar"BOOT variable = Current BOOT variable = CONFIG_FILE variable =Current...

I am still in learning phase for Cisco ASAI would like to know what is best practice to add multi-context firewall into monitoring. we will be deploying ASA in multi-context mode and it will be monitored in truesight   

when configuration the Static routing on the ASA to FMC , it cannot deploy to FTD2110. after on the FMC configuration is distributed to the FP , not issued by success, error screenshot belowdeployment failed due to conflict with ongoing prevlous depl...

I have a lot of users in my realm that are "available for policy=no"  I'm trying to understand why these users are "not available" to add to an access policy and how I can fix it.

Hello, Hoping someone could offer a creative or easy solution to a problem I experienced this morning.  We have an ASA5516 running 9.8(3)29.  It has a dedicated internet connection connected to Gig1/1 and layer 3 switch on the INSIDE interface.  The ...

Hey Guys, we are having an issue tuning our FMC.  What we are wanting to accomplish if possible. is to send all firewall logs to a SEIM server.Firepower Now we have the firewall pointing to our SEIM solution, but we are only able to extract internal ...

We have configured the FirePower to send syslog messages via the Action Alerts, it seems to work initially however after a short period of time the FirePower stops sending messages to the server. The logs are still being generated as we can still see...

Buen dia. Necesito una solucion para un negocio pequeño, necesitamos hacer que en nuestra red wifi, se quede registrado todo lo que los usuarios hacen en internet, supongamos que x usuario entra a una pagina www.google.com, y despues de ahi coloca un...

Hi I have Cisco ASA 5506 and I used to be able to connect to the asa via asdm, always working, but today I was told to hardening the asa, so I disabled the TLS 1.0/1.1 only allow TLS1.2, see below command  ssl server-version tlsv1.2ssl client-version...

Running Sourcefire version 6.2.3.4-42, and getting URL Filtering Download Failure when Safe Search is used in my Access Control Policy Rule. The rule is set with an IP range that is well above the IPs of the server, FMC, or the ASA. The only way I ca...

 We have a ASA5506-X running 6.2.2.  After setting up a 1to1 NAT Rule for a SIP Trunk today we are now in a state where the ASA won't complete the FTD Init.   We are getting this message at the console over and over. /ngfw/usr/local/sf/bin/pmmon.sh: ...

Can you simply add a new host or create a new object-group and add all the source hosts in the IPSEC profile on ASA without breaking anything assuming remote end has allowed the new host?

So if I have a IPSEC connection allowing let's say local source addresses 10.10.10.10 and 11.11.11.11 to remote end of tunnel 100.1.1.1, and want to add 12.12.12.12 as an addition source host on my local end, do I just make the update under "Local Ne...