Network Security

Resolved! Migration from ASA 5512-X to ASA 5516-X

Hello, I have to migrate an ASA 5512-X HA-Pair (Active-Passive) to an 5516-X HA-Pair (active-passive). I wonder if I just could copy and paste parts of the actual 5512-X configuration (network-objects, access-lists, nat, group-policies, ..) to the 55...

Resolved! general configuration on Firepower/ASA

Hi everyone, I just got this new device. I am new to this Firepower5508 and have to complete the basic settings in a short period of time... I would like to ask: 1.) In the router mode, how do I change the security level for interfaces (like th...

Resolved! Adding SSD to ASA 5555X or 5525X - general questions

I am prep'ing two HA pairs of ASAs for FirePOWER. I have (hot) installed the SSDs (two in 5555X and one in 5525X) and did not see the SSDs in SHOW INVENTORY. Upon reading the instructions in the ASA hardware guide, it says that you must reload the AS...

Firepower TCP FIN issue

Hi, We are having a strange bahviour with a FTP connection. We have a session where the client is sending TCP FIN to the server but this TCP is being dropped by IPS FIREPOWER. Doing a capture in IPS we see the TCP FIN which is send from client to s...

Pen test on ASAx shows weak TLS

Hello, I've run a Pen test against our ASAx and it shows weak TLS, how do I fix this and what side effects might we get. We also use the Cisco Anyconnect for our remote users as I guess they use this? https://www.ssllabs.com/ssltest Screenshot ...

Does the Cisco ASA 5505 ikev2 SSH2 512 bits support Site to Site VPN connections?

Hi at all, we have a cisco ASA 5505 (ASA Version: 9.0(1)) and need make a Site to Site Connection with following parameters: IKEv2, Phase1Encryption: AES-256Integrity Hash: SHA512 (SHA Version 2) Does this type of ASA support SHA2 512 ? Thanks....

Resolved! Enable "enable" on ASA 5506-X with FIREPOWER

Hello: I am new to Cisco, pardon my little knowledge. I've acquired an ASA 5506-X with FIREPOWER and I've asked a friend to help configure it. We're not able to enter "enable-mode" when we connect to the console. We are using the USB port on the de...

IOS FW inbound static PAT range possible?

Hi I have to create connectivity for an external phone system say port 50000-51000 UDP from outside to a single host inside. I would like to map the whole UDP port range range from outside (hitting the external interface) to inside (pabx host 192....

Firepower Device Manager

How feature rich (if at all) is the FDM for managing a 2110 running latest FTD image? Are we able to configure the following - * prefilter policy * Site to Site VPN * Check in to Smart Licensing for IPS licenses Having only every used FMC, I am u...

Mapping of CVE Identifier to sourcefire ruleIDs

how to find the list of sourcefire rule ids for a particular CVE Identifiers?

Resolved! FMC 2120 FTD Management Only Port

Hi everyone. I've reviewed several different documents about the 2120 and FMC, https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/system_configuration.html#ID-2241-00000370 as an example, however, ...

ASA Cluster Transparent Mode Dst MAC L2 Lookup Failed

Hello, Cluster Transparent Mode (2 units), only 1-2 flows to the same destination host are successful, all others fail. If I remove a unit from cluster (anyone), everything is OK. When I add a unit to the cluster, cluster is OK and healthy, but onl...

How to export all Appliance Status Summary in .XLX or .pdf

Is there any way in FMC 6.2.3.5, where we can Export all the Appliance Status Summary list along with their Appliance Name and its Status (Critical, Warning , Normal etc.) & Description either in .pdf format or .XLX/.CSV format. I browsed System > H...

rv320 slow internet speed

I have 2 internet providers that I test everyday. 1 200/200mbps thru rv320 reduce to 214/126mbps 2 1000/100mbps thru rv320 reduce to 364/139mbps How can I set rv320 to get better speed from providers.

Resolved! ASA 5525 vlan interface traffic not working

I am working on configuring a pair of cisco ASA 5525 and I am running into some trouble. I have done the basic configuration and have a management interface and HA setup without issue. Now I am trying to configure some vlan sub-interfaces but cannot ...

Network Security

Forum Posts

Resolved! Migration from ASA 5512-X to ASA 5516-X

Resolved! general configuration on Firepower/ASA

Resolved! Adding SSD to ASA 5555X or 5525X - general questions

Firepower TCP FIN issue

Pen test on ASAx shows weak TLS

Does the Cisco ASA 5505 ikev2 SSH2 512 bits support Site to Site VPN connections?

Resolved! Enable "enable" on ASA 5506-X with FIREPOWER

IOS FW inbound static PAT range possible?

Firepower Device Manager

Mapping of CVE Identifier to sourcefire ruleIDs

Resolved! FMC 2120 FTD Management Only Port

ASA Cluster Transparent Mode Dst MAC L2 Lookup Failed

How to export all Appliance Status Summary in .XLX or .pdf

rv320 slow internet speed

Resolved! ASA 5525 vlan interface traffic not working

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

ASA Copy local flash bin files to SCP

Effectiveness and performance impact of enabling MUD in ISE

Is PBR actually pushing traffic down VTI tunnels on FTD?

FMCv 7.6 Policy Printing

CSCwn22565 - ERROR: cannot set default route for broadcast packets.

SVIs on FTD or not?

URL addresses get my domain added

How to delete hundreds of Unused lines - ASA

cdFMC and CLI access

Cisco ASA 5545 & 5550