Network Security

Hello All, How to efficiently migrate ASA-X configurations to Firepower 4100 (ASA Image)? In case we use FTD image, FMC and the migration tool are very helpful but what if the installed image is an ASA? Note that the ASA-X was not running the Firepow...

Dear all, I have 3 FTDs 2100 version 6.2.3 connected and configured by Virtual FMC (6.2.3). Two of the three FTDs are configured in HA mode as per attached. I want to break the HA in which FTD_02 which is the active (as attached) keeps working and pr...

Hi Team,   We have anyconnect configured on ASA 5508-x with windows radius(NPS). We are trying to add multi factor authentication with Google Authenticator and Corporate asset validation with registry entry using AD environment.   Currently from any ...

Hi all, I am trying to add my cisco firepower 2130 appliances to my FMC. According to the link (https://www.youtube.com/watch?v=eshXpBPPKPg), from the console CLI, after entering the default username and password, it should prompt me to accept EULA a...

I have very limited knowledge with CISCO firewall. Is there any CISCO's tools or ways/work-around to import policies from Sourefire Defense Center 4.x into FMC 6.3.0?Thanks.

Hi There, We have FPR2140-FTD box in HA and have separate zones in Firewall for LAN and Server Zone. In Server Zone WSA is connected, we have requirement to implement WCCP. Please suggest wccp implementation on FTD.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/interface_start.html#34996   The ASA does not support connecting an EtherChannel to a switch stack. If the ASA EtherChannel is connected cross stack, and i...

I get a crictical error message on FMC saying the following:  ASA5555: URLFilter used count will exceed total by 2 licenses.ASA5555: MALWARE used count will exceed total by 2 licenses However for My ASA though the SFR is fail-open and I am allowing a...

Hi all,   sorry if this has been answered somewhere else, doing a quick search I didn't find anything. Does anyone know if EEM is supported on Active/Active HA pairs? We run version 9.8(2)17 and I don't see the commands available. I have tried runnin...

My firepower reports that there are indications of compromise on a few computers every day. when i drill into the analysis, the malware event was blocked (with reset) with my policy.  So the devices have not really been compromised. is there some wa...

Since the documentation says this:   The Firepower System does not support trusted AD domains. This means that the Firepower System does not track which configured domains trust each other, and does not know which domains are parent or child domains ...

Hey Fellow Cisco Professionals,    I am working on enabling FIPS mode on my ASAs(5516x and 5512x) but my site to site and remote access VPNs break after enabling FIPS. I'm having trouble finding good documentation for any prerequisites or caveats for...