Network Security

Hello Friends,   I am using Cisco asa 5512 on 9.8.2. due to recent security measurement we have enabled TLS 1.2 with custom ciphers.   However, SSL LAB shows there is no support for secure renegotiation.   I wanted to know if asa support this feature...

Hello,    I have a cluster of CISCO ASA 5545 running on failover Active/standby mode.  The current version is 9.6.3.1 which appears to be vulnerable to some recent Csvs.  Can you please help me decide to which stable and clean version should i upgrad...

Hi,   I am facing this issue, the backup file which i need to restore on FMC is having VDB 304 version and FMC-4000 is having VDB 305 version so is there any way that i can degrade the 305 version to 304 to make it compatible with backup files.

Hi Guys, Is it possible to configure local user account for FMC for SSH access? How? Thanks

Hi all, I've just set up FW 5506-X, after putting DNS server behind the firewall with default "balance and security" intrusion policy, and malware blocking(I added all Category, and chose Block Malware), all pcs and even FW itself cannot use DNS serv...

I was wondering what the process was to downgrade the VDB to an earlier version.  We are working on applying a backup but are unable to because the VDB build is currently 231 and needs to be 222.  Con someone help with this?

Lets start from beginning. We have two 5515 running FTD 6.1.0.1 and a Virtual Machine on ESXi with FTD 6.1.0.1! We upgraded our FTDv to 6.2.0 and our Sensors in HA (Active/Standby) are on 6.1.0.1! After the Upgrade no Deployment of our Access Polic...

Hi, I tried searching over the internet but I only saw FP2100 for password recovery. How I can do password recovery for ASA running in FTD?  Thanks

I have a new ASA5506-X. I have confirmed it is in routed mode. I used the ASDM start up wizard and CLI, but either way it will not allow changing of the IP address on the inside interfaces.   For the CLI, I entered: config t interface g1/2 no shut se...

Actually, I want to allow FTP from outside to inside, but the packet tracer display "Drop-reason: (acl-drop) Flow is denied by configured rule".   I must be wrong something.  I have attached my config.  Any assistance would be greatly appreciated.

Is it possible when dealing with anyconnect for the ASA to read in the domain suffix before a username and know which radius server to send it to in a radius server group? I know you can do this with different connection profiles but I am not trying ...

Hi   I want to monitor firepower device interface traffic but cannot find correct ifindex OID under standard MIB. I also installed firepower mib files in monitoring system but still failed to find ifindex.   does anyone have ifindex SNMP OID can shar...