Network Security

Team, I am trying to add pair of Cisco FTD 2110 to FMC in HA. One is successfully added but the other FTD is stuck in "Discovery from the device is in progress" for approximately 1h 58Min. I have Cisco FMC 1000 in HA running 6.2.3 version. I am not a...

Issue: During Image Install step of Software Image Upgrade Process, the FMC issues reboot to vFTD... and vFTD thereby becomes inaccessible due to br1 mac address changing to it's original value:     The vFTD is created in vSphere1. After VM is create...

App owner complained of blocked traffic. I verified firewall rule was correct and traffic was allowed.  I then searched Intrusion events and found that the traffic in question is being dropped by "NETBIOS DCERPC possible wmi remote process launch"   ...

Hi There We are running FTD 6.2.2 and wondering how we go about allowing access to a webserver in the DMZ using the public ip address which is natted from the FTD device. Outside - 59.23.x.x DMZ 172.16.100.x Inside 192.168.17.x   We have a webserver ...

Need some guidance on adding a Cisco 5505 FW to create a site-to-site VPN across an already in place Cisco 5516. Adding a VPN = Home Site A (Cisco 5505) > (Existing Firewall) > Client Site B (Cisco 5505) Existing FW = Cisco 5516 Need to allow some se...

Hi, Have 2, 5510 ASA firewalls i need to upgrade.  one firewall is at 7.2(3), and the other is at 8.2(5). Was reading release notes, and the upgrade path says i have to first upgrade to 8.4(5), and do not see 8.4(5) available for download. How can i ...

How do you change the https port number in Firepower Device Manager This is a Standalone ASA 5506-xCisco Fire Linux OS v6.2.2 (build 11)Cisco ASA5506-X Threat Defense v6.2.2 (build 81) 

From guidelines and limitations on configuring DHCP: DHCP clients must be directly connected to the ASA and cannot send requests through another relay agent or a router.If I want to connect a number of hosts through a WiFi access point, is this acces...

Hi   We have a FW with FTD 6.2.3.6 that is not connected to internet on MGMT interface.   Since we drop the 90 days evaluation period, no it says unregistered and all new deploy of objects and policies can't be done   Could you help?   IS it possible...

Hi, My current setup is that I have a 2960S switch which links to a 897VA on a trunk link, the 897VA is setup with 6 vlans for various networks. The 897VA is also setup with ADSL connection to Plusnet via the built in VDSL controller it is also setup...

Hi all. I'm trying to configure BGP over VPN L2L. The logs show that the source interface for BGP is the Outside interface and not the Inside. I was looking for a command like: neighbor NET update-source (inside). But as this command is only availabl...

Hello Everyone,I have installed an ASAv instance in AWS and am trying to bring up an IKEv2 L2L using certificate authentication.  Phase I and II pass and the SA gets built up.  I get traffic to pass but only briefly, exactly 1 min... Then it dies.  I...