Network Security

Hi,   We are having a strange bahviour with a FTP connection. We have a session where the client is sending TCP FIN to the server but this TCP is being dropped by IPS FIREPOWER. Doing a capture in IPS we see the TCP FIN which is send from client to s...

Hello,   I've run a Pen test against our ASAx and it shows weak TLS, how do I fix this and what side effects might we get. We also use the Cisco Anyconnect for our remote users as I guess they use this?   https://www.ssllabs.com/ssltest   Screenshot ...

Hi at all,   we have a cisco ASA 5505 (ASA Version: 9.0(1)) and need make a Site to Site Connection with following parameters: IKEv2, Phase1Encryption: AES-256Integrity Hash: SHA512 (SHA Version 2)   Does this type of ASA support SHA2 512 ?   Thanks....

Hi I have to create connectivity for an external phone system say port 50000-51000 UDP from outside to a single host inside.   I would like to map the whole UDP port range  range from outside (hitting the external interface) to inside (pabx host 192....

How feature rich (if at all) is the FDM for managing a 2110 running latest FTD image? Are we able to configure the following -   * prefilter policy * Site to Site VPN * Check in to Smart Licensing for IPS licenses   Having only every used FMC, I am u...

how to find the list of sourcefire rule ids for a particular CVE Identifiers?

Hello,   Cluster Transparent Mode (2 units), only 1-2 flows to the same destination host are successful, all others fail. If I remove a unit from cluster (anyone), everything is OK. When I add a unit to the cluster, cluster is OK and healthy, but onl...

Is there any way in FMC 6.2.3.5, where we can Export all the Appliance Status Summary list along with their Appliance Name and its Status (Critical, Warning , Normal etc.)  & Description either in .pdf format or .XLX/.CSV format. I browsed System > H...

I have 2 internet providers that I test everyday. 1 200/200mbps thru rv320 reduce to 214/126mbps 2 1000/100mbps thru rv320 reduce to 364/139mbps How can I set rv320 to get better speed from providers.

Hello,    I would like to know more details about ZBF Inspections using "policy-map type inspect avc" option in IOS XE 16.9.1 This means that ZBF can inspect nbar applications , such as dropbox or ms-office365. What kind of inspections are performed ...