Hello,FTD 2110 on 7.4.2I'm investigating why I'm unable to reach a vendor destination off my secondary VPN. I ran an ASP capture and received the following message in bold. However, I can run a packet tracer using the same source and destinations in ...
Hello everyone, Recently it became necessary to reset the password for the admin user, and the old password was lost. At the same time, there was access to FW under a different administrator account on the CLI of the firewall. The task was not as si...
Hello Cisco community,I have query regarding for VOIP configuration file, i was able to pull all company's configuration file for each telephone which its extension end with ".cnf.xml.sgn" now we're doing hardening is it possible to disable or protec...
Hi folks,Our vulnerability scanning tool has picked up couple of OpenSSH related vulnerability in all our 9000 series switch. See attached screenshot.I checked for any related post online but I couldn't find anything, even though there are some relat...
below the description: 'A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validatio...
Hey guys, Does anyone have SOP for how to put ports in the right vlan. I need to know step by step.Thank you all i
We are noticing some strange DHCP leases on our Cisco router. We noticed this issue as the pool was moving up faster than we knew clients were requesting new addresses. We noticed strange bindings like below: IP address Client-ID/ ...
Hey all, I have a Synopsis from a VA on my catalyst switch as below:" The X.509 certificate chain used by this service contains certificates with RSA keys shorter than 2048 bits." and the suggested mitigation is as follows: Replace the certificate in...
Hello!, I'm having an issue with the FPR2110T-TMC license. I was under the impression that this particular license was supposed to license the Malware and URL filtering features of the firewall, but I was only able to license the Threat Defense funct...
We have a third party coming in to an ASA firewall, and connects outbound to a cellular provider that has devices that we manage inside a private APN. On the way to that provider, we have to NAT the IPs in the provider space to something unique that ...
Hi All, Recently, we've got a vulnerability report where we've CVE-2004-2761 & CVE-2004-49 were found in the C9200L-48PL-4X-E switches. The current version is 17.6.5. Regards, Vikram Murudkar.
hi teamgood morningCan you help me with the following question, I have a C3560 switch version 15.0.1 SE3. I am setting NAC.In the ports I am configuring the NAC authentication timers, but the command I need is not for this switch with "authentication...
Greetings, My name is Nara, I have a question regarding how to trigger security incident in Cisco XDR. The background is that this is my first time to handle XDR Technology and I am trying to setup Cisco XDR in my lab environment. I want to try scena...
Hi, everyone: Need support from this community. What does a tunnel L2TPv3 when receive a 802.1AE or 802.1X frame. Does drop it or tunnels it?
While there are numerous sources out there detailing how to configure a trustpoint and add a ca and certificate to it. I've yet to find any details about updating a certificate once it expires.Some of the things we've tried or considered:Re-import th...
