Network Security

I see this error NPU Accelerator Manager: FATAL - NPU Accelerator FAILED whenever I try to boot from .spa file. I am trying to re-image a firepower device and boot from .spa file. Does this indicate a hardware issue or some issue with the way the sof...

Hello Together,I configured on Cisco FMC 7.6 the DHCP Server for one Sub-Interface because we have to route this VLAN on the Firewall. I add the VLAN tag and configured the switch also for this Vlan. Problem is I cannot get a lease. I saw on Cisco IS...

I have a customer who has a single FMCv that is managing 4 x FTD 4115 appliances. The customer is using the FTD 4k's as follows: 1 HA pair for Firewall functionality only with Threat so config includes:- Interfaces, Static Routes, Objects, ACLs, NAT ...

Hello, I am struggling to find how to view intrusion and security intelligence related events on cdFMC. It seems I can only view connection events.  Here is another screenshot from an on-prem FMC, where you can select all sort of events, including i...

The University of the South Pacific (USP) operates one of the most geographically distributed higher-education networks globally, with campuses and learning centers spanning 12 Pacific nations and nearly 2,000 islands. This environment presents signi...

Hello guys , The case is to add a new entry in an already deployed Extended  ACL(in a vpn tunnel), and this entry need to be somewhere in the middle of the ACL.   Today i encountered the below.1) Clicked Add 2) Added the relevant sources & destinatio...

Hi dear Communities,I have configured Cisco FTD HA configuration on EVE-NG,As I understand Standby ip in Monitored Interface is important to work HA properly.But I have question If we have 2 or 3 ISP Provider how many Failure Limit should uje?

I am looking at the Cisco FTD platform logs, and we are trying to convert the logs to OCSF format. We want to focus on security relevant events, according to the guide there are only 5 syslog messages which are security relevant - https://www.cisco.c...

I have two Cisco Firepower 2100 firewalls that will connect to two ISP routers (non-Cisco). These are separate internet circuits from the same ISP. The connections between the firewalls and the ISP routers will pass through a pair of stacked Catalyst...

Is it really expected that innocent cluster members are kicked out of the cluster after split-brain is resolved and one of cluster control units leave the cluster, or it's a joke of Cisco developers?In the below example unit-2-1 became control unit d...

I would like to change the hostname of two FirePower 4100 systems which are in HA active/passive mode between the two systems on the installed ASA 9.7 code. The ASA hostname was changed just fine. When I try to change the FirePower chassis hostname v...

Hi allCan anyone tell me the following Can firewalls and IPS stop DDOS attacks? I see they can do basic protection, syn floods etc but they arent specifically designed to do so? is this correct?Where would we best place these ddos devices, infront of...