Network Security

Hello, I have a couple Nexus 9k switches that have a good amount of interface IPs (SVIs) on them that are used part of the VPC process running between the 2 N9ks.     If I take any of those SVIs IP addresses and put in the IP into putty, I can SSH in...

Hello,   I was wondering if anybody knows about this specific version no longer support object-group ? I upgraded it from 03.07.03 to 03.07.05E and now I don't have an option to configure it.   xxxx(config)#ob? % Unrecognized command   Device Informa...

All, Preface:  We currently have an all Cisco ASA infrastructure at our core locations with Firepower and any solution we chose needs to integrate into our existing FMC.   In short we have 2-3 small offices with 6-12 workers at each.  We want to conn...

Hello;I need to label traffic from one site to another through a vpn Ipsec with two asa's for aplicate qos, but, in the class map does not allow me to match with more than one element, according to the attached image. Thank you

Hi,I have noticed that after a rule update, rules in "Drop and Generate Events" mode are added to the Base Intrusion Policy. In the case of an inline deployment this is not desired, thus tuning is required every time. Why does this happen? Is there a...

We purchase newly  a CISCO 5585-x firepower ssp 10 and firepower module is running 5.4.0.764 version and we need to upgrade it to 6.1 But when i try to upgrade through firesight management, It shows no appiance found I tried with all the upgrade from...

I tried to block Any download Facility of users using internet, BY Deny   FTP and   TFTP Through  ASA ACL, But user still Can download, like video from YouTube and etch?

FMC 5.4.1.6.  The "Current Sessions" widget on the summary dashboard shows user sessions that are months old.  I have attempted a database repair and reboot, but they will not expire.  Is there a way to expire these session or can I just delete the r...

Hi i have cisco 5525 ASA which is connected to core switch and dmz switch and i want the core switch side network (i.e 172.20.x.x) to access the DMZ network (192.168.x.x) and i run the following command on the ASA 5525 access-list inside-to-DMZ exten...

HELLO EVERYBODY,   My FIREPOWER doesn't block the application hotspot shield. Can you help please?

I am basically coming here to see if anyone else, not a very big expert in Cisco, has found something about this CVE-2018-0101 vulnerability that actually helps them out, instead of ending up at a page like this: https://supportforums.cisco.com/t5/se...