Network Security

 We have a ASA5506-X running 6.2.2.  After setting up a 1to1 NAT Rule for a SIP Trunk today we are now in a state where the ASA won't complete the FTD Init.   We are getting this message at the console over and over. /ngfw/usr/local/sf/bin/pmmon.sh: ...

Can you simply add a new host or create a new object-group and add all the source hosts in the IPSEC profile on ASA without breaking anything assuming remote end has allowed the new host?

So if I have a IPSEC connection allowing let's say local source addresses 10.10.10.10 and 11.11.11.11 to remote end of tunnel 100.1.1.1, and want to add 12.12.12.12 as an addition source host on my local end, do I just make the update under "Local Ne...

hi i am configuring my Cisco Firepower 4120 appliance. it has the 6 port FTW module. in the GUI, i see bypass state enabled for ports 3-4 but it says disabled for ports 1-2 and 5-6 and i dont see an option anywhere to enable it. where is the option t...

I cannot seem to find the snmp community settings on my ASA. I am using NGFW Version 6.2.3 not managed by the FMC. I would bring it into my FMC but it is remote ASA and to bring it in I would have to configure another router to pass my vpn traffic un...

trying to restore a backup to a virtual FMC running 6.4.0. My VDB matches and so does the FMC version in the backup. The error is "Rule Update UI Components version mismatch". I can't find any information on this in the documentation or on the web, a...

I have a ton of sites running ASA with firepower on 6.2.3.14. Looking to get some firepower 1010’s that require the fmc to be 6.4. Anyone running 6.4? Any major issues? Is it stable?

Dear Expert, I have deployed anyconnect on outside interface. But when i want to connect the anyconnect, the connection is timeout. No response. Even i brower the IP address on web, still no response. I suspect the outside interface deny the incoming...

HI, Can we configure GRE, IP-IP tunnel between two CISCO Firepower Device with FTD image.  RegardsBinay 

Hi all, We've been running different ASA profiles together with a LDAP Description to Profile mapping enabled. This works fine, but i've always had issue's on finding the right way to let people get their right .xml profile downloaded. Every profile ...

Hi..Community its Argent,We have login my asa firepower 5516-x  and take the command enable but not gate it.How to access and configure device without enable command .Version:- Cisco Fire Linux os v6.2.3(build 13)              Cisco ASA5516-X Threat ...

I have a few hundred 891F routers with IOS IPS enabled.  We used to update signatures using CSM.  Now I need to convert them to auto-update. I have not been able to find any working examples of updating signatures by specifying "url" instead of "cisc...