Network Security

Hi allMy device is working in FDM mode without FMC. it is version 6.2.1-3. Last week, I planned to upgrade to the version 7.6.4-69 recommended by Cisco, but unfortunately, there were errors during the upgrade process. By checking the upgrade status i...

Hi All,I have FMC and i am trying to get "top web application seen" back to summary dash board in FMC as i have mistakenly deleted it but i do not see this option avaiable when i add widgets rather i see attached only with no option to specificaly ad...

I have finished configuring and deploying my Balanced Sec and Conn IPS. And i would like to test it before deployment. And I was wondering if anyone out there has an idea on how to test an IPS policy?

Hi,Is it possible without downtime to change the access vlan on the 2 port-channels used for the ASA cluster control links ? I tried earlier on the switch with int range po 11, po 12 -  switchport access vlan [new vlan] and the cluster broked. Maybe ...

Hi All,    Apologies if this is in the wrong area, but it covers a few.   I'm setting up RA VPN using Anyconnect client 4.6, ASA headends are 5545's running 9.9. I am also integrating ISE 2.4.The clients currently authenticate via certificate on the ...

Today, I'm working on the High Availability of Firepower Management Center in eve-ng. I've already done FTD HA which was quite easy to configure and verify, but HA for FMC is tough to get. I followed cisco's official documentation. The issue I found ...

Hello all.I'm trying to enroll a certificate to the FTD managed by FMC via EST protocol, but... upon creating a certificate object with EST fields filled in and attaching it to the FTD, i get an error in the FMC:crypto ca authenticate _TestEST nointe...

Hi All,Posting this for everyone's awareness.I encounter odd issue which Cisco TAC tried to troubleshoot before I had to redeploy the firewall for different setup. I was running FPR1010 running FTD version 7.6.4.This firewall was onboarded into cdFMC...

ASA is not forwarding RST packet even when sequence number is correct.Src ---- ASA --- DEST : when src is sending RST packet to DEST it does shows up on ASA ingress interface but not in egress interface so the conn is being RST by src but dest thinks...

I'm currently standing up a Cisco SSM On-Prem but have hit a bit of an issue regarding creating and adding a browser TLS certificate.  Our (private) Certificate Authority have very strict rules on what can and can't be in the CSR, unfortunately the S...

I have two FTDs that have been offline for more than a year, and now I can deploy the configuration to change the IP address of the WAN interface to connect to the internet. I now have internet on site, but from a different ISP.

Have FPR1010 that connects to c2960 and drops SSL when user tries to launch program.  Switch shows one class-map with errors and User states getting errors.  "The error SSL connect error (openssl ssl_connect: ssl_error_syscall) indicates that the TLS...

2 nodes in the cluster with 2x9500s. Is it possible to have each node connect to separate 9500s?

Hello, we are using FMC version 7.4.6. I am trying to activate the Dynamic Attributes Connector on FMC (Integration ->Dynamic Attributes Connector -> enabled ). After a long wait, Verifying images passed with a warning. Downloading the connector and ...

Hello community,I am experiencing an intermittent connectivity issue in an environment with Cisco ASA firewalls in failover mode and Nexus 5K switches configured with vPC. I would appreciate any insights or confirmation of possible root cause scenari...