Network Security

Issue: During Image Install step of Software Image Upgrade Process, the FMC issues reboot to vFTD... and vFTD thereby becomes inaccessible due to br1 mac address changing to it's original value:     The vFTD is created in vSphere1. After VM is create...

App owner complained of blocked traffic. I verified firewall rule was correct and traffic was allowed.  I then searched Intrusion events and found that the traffic in question is being dropped by "NETBIOS DCERPC possible wmi remote process launch"   ...

Hi There We are running FTD 6.2.2 and wondering how we go about allowing access to a webserver in the DMZ using the public ip address which is natted from the FTD device. Outside - 59.23.x.x DMZ 172.16.100.x Inside 192.168.17.x   We have a webserver ...

Need some guidance on adding a Cisco 5505 FW to create a site-to-site VPN across an already in place Cisco 5516. Adding a VPN = Home Site A (Cisco 5505) > (Existing Firewall) > Client Site B (Cisco 5505) Existing FW = Cisco 5516 Need to allow some se...

Hi, Have 2, 5510 ASA firewalls i need to upgrade.  one firewall is at 7.2(3), and the other is at 8.2(5). Was reading release notes, and the upgrade path says i have to first upgrade to 8.4(5), and do not see 8.4(5) available for download. How can i ...

How do you change the https port number in Firepower Device Manager This is a Standalone ASA 5506-xCisco Fire Linux OS v6.2.2 (build 11)Cisco ASA5506-X Threat Defense v6.2.2 (build 81) 

From guidelines and limitations on configuring DHCP: DHCP clients must be directly connected to the ASA and cannot send requests through another relay agent or a router.If I want to connect a number of hosts through a WiFi access point, is this acces...

Hi   We have a FW with FTD 6.2.3.6 that is not connected to internet on MGMT interface.   Since we drop the 90 days evaluation period, no it says unregistered and all new deploy of objects and policies can't be done   Could you help?   IS it possible...

Hi, My current setup is that I have a 2960S switch which links to a 897VA on a trunk link, the 897VA is setup with 6 vlans for various networks. The 897VA is also setup with ADSL connection to Plusnet via the built in VDSL controller it is also setup...

Hi all. I'm trying to configure BGP over VPN L2L. The logs show that the source interface for BGP is the Outside interface and not the Inside. I was looking for a command like: neighbor NET update-source (inside). But as this command is only availabl...

Hello Everyone,I have installed an ASAv instance in AWS and am trying to bring up an IKEv2 L2L using certificate authentication.  Phase I and II pass and the SA gets built up.  I get traffic to pass but only briefly, exactly 1 min... Then it dies.  I...

Hello guys,   A client is asking me to implement a vpn site to site using main mode. But I have a Cisco ASA 5525 version 9.1(1) with its default value aggressive mode. I think that If I use the command "crypto ikev1 am-disable" in the global configur...