Network Security

Hi.I post these question here because after a lot of searching, I stumble upon the lack of good material about this subject. In a WLC (Wireless Lan Controller) central switching scenario:Imagine I have a very secure (RADIUS/802.1x) lan vlan data subn...

On Monday I  was able to  run  ASDM on my PC but last days it crashed.   So I’m using Java 7 update 79. I added the ip address of the asa to the exception list and imported the ASA certificate into  Java as well in trusted root authorities store  in ...

I need some help to write a playbook to upgrade cisco ASA. - gather facts like ios_facts - compare current image with the new image- copy image to flash- change boot sequence-reload Thanks 

Good morning all,if there any way to configure a snmp trap for a single interface if the used bandwidth is xxx Mb or 60% ?My ASA 5555 software is 9.8(3)21

Hi Everyone, We are using FTD version 6.4 to test the integration feature  with Cisco Threat Response(CTR). But Configuration Guides(FTD version 6.4) say only the intrusion events can be sent for investigation to CTR. This feature was available in FT...

Need help with below Firewall rule change request: Please allow the following UDP for outgoing only: No Type Port Usage 1 Local port 9443 Required for Agent local services 2 Local port 15011 No Protocol External host communications port Usage 1 HTTPS...

I see this when doing "UDP PAT pool management, address X.X.X.X, range 1024-65535, allocated 5"show nat pool" on a Firepower but don't see any NAT statements for this under NAT.

hello dearscan somebody please describe what is the HA bundle devices, is it two devices, a license or what? in example 4120 HA bundle? and any document, please.and also what is the subscription 4120 best regards

Hello, Is there a REST API (e.g. for Firepower Managment Console, etc) that will allow you to add/remove custom Snort signatures/IDS Rules on a Firepower IDS? What about IPs to detect/block on? The closest I found was "PUT Inidicator" for the Firepow...

Hello all, As a network engineer working on a project to deploy and configure a series of ASA 5506-X running 9.9(2) iOS, I have encountered the following important issue:When I configure a NAT Exempt rule for traffic flowing from one zone to another ...

Is it possible to setup a correlation event that will temporarily blacklist an IP address based on receiving a # of intrusion events against a destination IP? Or is there another way in the FP to do something like this?  The appliance is sitting inli...

I don't see any release notes indicating what is needed to run the latest ASDM 7.12(2).  When I try to run ASDM on the latest version my windows 10 throws an error "This app can't run on this PC".  I have Java Version 8 update 171.  Anyone else try? ...

Hi,I have downloaded  "asa917-32-k8 " , Please help to locate the correct asdm version From the download site I found the supported version for asa 5520 is asdm-781-150 . Which one is correct ?  https://www.cisco.com/c/en/us/td/docs/security/asa/comp...

Hello, everybody. In my device, it is actually a router I have the following configuration line: ip nat inside source static network 10.0.0.0 10.128.194.0 /23 extendable no-alias which nats all the IP addresses in the 10.0.0.0/23 to the corresponding...