Network Security

ASA is not forwarding RST packet even when sequence number is correct.Src ---- ASA --- DEST : when src is sending RST packet to DEST it does shows up on ASA ingress interface but not in egress interface so the conn is being RST by src but dest thinks...

I have finished configuring and deploying my Balanced Sec and Conn IPS. And i would like to test it before deployment. And I was wondering if anyone out there has an idea on how to test an IPS policy?

I'm currently standing up a Cisco SSM On-Prem but have hit a bit of an issue regarding creating and adding a browser TLS certificate.  Our (private) Certificate Authority have very strict rules on what can and can't be in the CSR, unfortunately the S...

I have two FTDs that have been offline for more than a year, and now I can deploy the configuration to change the IP address of the WAN interface to connect to the internet. I now have internet on site, but from a different ISP.

Have FPR1010 that connects to c2960 and drops SSL when user tries to launch program.  Switch shows one class-map with errors and User states getting errors.  "The error SSL connect error (openssl ssl_connect: ssl_error_syscall) indicates that the TLS...

2 nodes in the cluster with 2x9500s. Is it possible to have each node connect to separate 9500s?

Hello, we are using FMC version 7.4.6. I am trying to activate the Dynamic Attributes Connector on FMC (Integration ->Dynamic Attributes Connector -> enabled ). After a long wait, Verifying images passed with a warning. Downloading the connector and ...

Hello community,I am experiencing an intermittent connectivity issue in an environment with Cisco ASA firewalls in failover mode and Nexus 5K switches configured with vPC. I would appreciate any insights or confirmation of possible root cause scenari...

Hello,This is a completely isolated classified network in which Firepower firewalls will be managed through Cisco FMC.My question is whether there are capabilities for Cisco FMC to operate and function without an internet connection, specifically whe...

Firewall platform CSF 1200 with ASA has opt_cisco_config with increasing size, every week, \opt\cisco\config\var\log\ process_stdout.log increases in size by 910 Kbytes, by about 1 percent each week.process_stdout.log writes every minute one entry, s...

I've now been through two TAC techs who have been unable to resolve this issue. I am unable to get these new HP printers to profile to the "HP-Printer" profile or beyond. They are remaining in the "HP-Device" profile which is the parent profile to "H...

Hello,We are currently troubleshooting an issue where the ASA is not sending syslog messages to a server that resides across a VTI tunnel.At the moment, the ASA does not appear to support configuring a syslog destination using a VTI interface (i.e., ...

Hello, is it possible to do NDP proxy on the ASA firewall? Or is there any other feature, which can be used for redirecting traffic between two IPv6 enabled hosts in the isolated private VLAN through the ASA? For IPv4 traffic I'm using proxy ARP, but...

like to connect to speak to a cisco Network tech support on ARP Proxy and NDP supporting L3 switches