Network Security

Resolved! Site-2-Site VPN tunnel established ikev1 in asa but traffic not passing

Hi Community, I am stuck in here as, VPN is successfully established between DC & Site1 but traffic (icmp or any other) is not flowing. Kindly help. Below are the two site IKV1 configuration. Site 1: object-group network Datacenter_nwnetwork-object 1...

Official Hardening Guide for Firepower 4100 Series

hi, Anyone know if there's a official hardening guide for Cisco Firepower 4100 series platform ? I only manage to find guide for ASA Firewall http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/200150-Cisco-...

Using tcp port 0?

12 years as a firewall guy... and this is a first for me.I have a request to allow firewall access to an app that apparently uses tcp port 0. I thought it didn't exist... but good-ol' google proved that wrong. I did find this comment: " Port 0 is ...

Resolved! How to forward port 443 through FTD 2120

I have 2 FTD 2120 Firewall with HA. I manage these by FMC. I need to port forward to my web server IP. For example: In my Firewall WAN there is IP Gi 0/1: 1.1.1.1 & 1.1.1.2. Routable Public IP Gi 0/2: 2.2.2.1/29 LAN IP Gi 0/3 : 10.10.10.10 Can anyo...

802.1x Printer Port Drops When Printer Is In Sleep Mode

HelloI have 802.1x configured on my Cat 3560 switch stack. For the most part everything works fine but I keep running into users who have printers that go into sleep mode and then the port reverts to a dead default vlan99. When the user goes to print...

ASA5506 with FTD - Remote Access IPsec?

I am considering re-flashing my ASA5506 from ASA to FTD. I am reading that there is a license required for Remote Access VPN operation, but all documents mention SSL (or "Anyconnect"). Right now using the "traditional" ASA OS, my ASA has no problem r...

Firewall AAA configuration

Does the aaa commands/configuration copy to standby firewall? I can't seem to get to my secondary ASA. Message TextFailed-Attempt: Session Authorization encountered an errorFailure Reason15020 Could not find selected Shell ProfilesResolutionAdd a s...

Resolved! ASA 1 Public IP to 2 internal Servers using same ports

Hi, I am moving some rules from a checkpoint firewall (r77.30) to an new ASA pair (9.8(2)28 one of the rules I have seen has 2 internal hosts sharing the same external IP on the same ports. is there anyway to do this on the cisco? e.g. outsid...

ASA5515 - Firepower CTRL + Protect enough for IPS to generate events?

Hi all, I've searched the internet high and low and cant find a definite answer to this one. With the old ASA's with the firepower modules is CTR+PROTECT licenses enough for the IPS to work and generate IPS events in the event viewer (adsm) or FMC? ...

Anyconnect GNS3 not working

So i am trying to connect a virtual PC into GNS3 ASAV using any connect. Typically Anyconnect is never a problem for me, but now when I try to connect, it goes through all the motions. It asked me do I want to accept the self signed certificate and...

Resolved! ASDM Issues - "Configuration > Remote Access VPN > Advanced > SSL Settings"

Hello, I have an ASA5525 running 9.6.3 code and ASDM 7.8.(2) 151 When browsing to: "Configuration > Remote Access VPN > Advanced > SSL Settings" the error code i receive: "The Forced Certification Authentication Timeout cannot be empty" wh...

Cisco ASA 8.2 NAT Exempt migration to 9.9

Sorry for my noob question, i have a config below from 8.2 access-list NO-NAT extended permit ip 10.0.0.0 255.0.0.0 10.172.8.224 255.255.255.224 nat (inside) 0 access-list NO-NAT FW# packet-tracer input inside tcp 10.3.3.3 443 10.172.8.224 $...

Resolved! ETHER CHANNEL ON ASA 5555X FTD

Is there a way to configure a ASA5555x FTD, managed by FMC with a ether channel to have a 3 Gig pipe for internet traffic ? ModelCisco Firepower Management Center for VMWareSerial NumberNoneSoftware Version6.2.3.7 (build 51)OSCisco Fire Linux OS 6.2....

FMC User-IP mapping

Hi All, For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?

Resolved! ASDM ISSUE

Hello i can't manage ASA through ASDM i applied configuration as below: hhtp server emable http 0.0.0.0 0.0.0.0 inside ssl encryption 3des-sha1 aes128-sha1 rc4-sha1 ASA 5540 version 8.0(4) and My laptop window 10 i need to know which java version...

Network Security

Forum Posts

Resolved! Site-2-Site VPN tunnel established ikev1 in asa but traffic not passing

Official Hardening Guide for Firepower 4100 Series

Using tcp port 0?

Resolved! How to forward port 443 through FTD 2120

802.1x Printer Port Drops When Printer Is In Sleep Mode

ASA5506 with FTD - Remote Access IPsec?

Firewall AAA configuration

Resolved! ASA 1 Public IP to 2 internal Servers using same ports

ASA5515 - Firepower CTRL + Protect enough for IPS to generate events?

Anyconnect GNS3 not working

Resolved! ASDM Issues - "Configuration > Remote Access VPN > Advanced > SSL Settings"

Cisco ASA 8.2 NAT Exempt migration to 9.9

Resolved! ETHER CHANNEL ON ASA 5555X FTD

FMC User-IP mapping

Resolved! ASDM ISSUE

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

Knowledge Hub: Cisco Technology for Securing the Enterprise

Announcing Resources That Guide You to Success

Cisco FTD portscan

ASA-AWS - EC2 IMDSv1 required for the PAYG license to be applied

Queries with Cisco Secure Client 5.1.3 & ISE

Cisco Research Study! Take a survey for a chance to win $50 gift card

What's the ideal way to implement app-based 2FA for admin login for AS

FTD interface still shutdown after being enabled on FMC

What would be the translated sources in NAT rule on Cisco FMC for FTD?

Port 3306 shows open on a ASA 5525X

FMC Migration from VMware to Hyper-V

License Needed for FMC on Hyper-V