Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Dennis Perto
Dennis Perto
Contributor
I am an enthusiastic security consultant who places great honour in genuinely humble consulting. I believe in serving the client with expert knowledge, and in not being afraid to admit when I am not the right expert anymore.
Recent Badges
Stats
Member since
05-04-2015
250
Posts
184
Helpful
26
Solutions
Certifications
Created by
Dennis Perto
in Security Blogs
in Security Blogs
02-01-2018
11:50 PM
02-01-2018
11:50 PM
I see that I only have the hardware specs for the 8200 and 8300 series. They have been posted here. FirePOWER 8200 and 8300 hardware specs
... View more
Created by
Dennis Perto
in Security Blogs
in Security Blogs
02-01-2018
11:49 PM
02-01-2018
11:49 PM
If you find any data that is incorrect, please contact me and I will correct this fact sheet. FP8250 2x Intel Xeon E5645 48GB DDR3 1333MHz 64GB System SSD Possible Malware Storage Pack 480GB SSD 2x Netronome NFE-3240 FP8260 4x Intel Xeon E5645 2x 48GB DDR3 1333MHz 2x 64GB System SSD 2x Possible Malware Storage Pack 480GB SSD 4x Netronome NFE-3240 FP8270 6x Intel Xeon E5645 3x 48GB DDR3 1333MHz 3x 64GB System SSD 3x Possible Malware Storage Pack 480GB SSD 6x Netronome NFE-3240 FP8290 8x Intel Xeon E5645 4x 48GB DDR3 1333MHz 4x 64GB System SSD 4x Possible Malware Storage Pack 480GB SSD 8x Netronome NFE-3240 FP/AMP8350 2x Intel Xeon E5-2680 v2 128GB DDR3 1333MHz FP model: 64GB System SSD AMP model: 400GB System SSD Possible Malware Storage Pack 480GB SSD 4x Netronome NFE-3240 FP/AMP8360 4x Intel Xeon E5-2680 v2 2x 128GB DDR3 1333MHz FP model: 2x 64GB System SSD AMP model: 2x 400GB System SSD 2x Possible Malware Storage Pack 480GB SSD 8x Netronome NFE-3240 FP/AMP8370 6x Intel Xeon E5-2680 v2 3x 128GB DDR3 1333MHz FP model: 3x 64GB System SSD AMP model: 3x 400GB System SSD 3x Possible Malware Storage Pack 480GB SSD 12x Netronome NFE-3240 FP/AMP8390 8x Intel Xeon E5-2680 v2 4x 128GB DDR3 1333MHz FP model: 4x 64GB System SSD AMP model: 4x 400GB System SSD 4x Possible Malware Storage Pack 480GB SSD 16x Netronome NFE-3240
... View more
Labels:
Created by
Dennis Perto
in Security Blogs
in Security Blogs
02-01-2018
02:09 AM
02-01-2018
02:09 AM
Some of the specs at least. If you want me to make a post about it, then I will update you when it is ready.
... View more
01-26-2018
01:44 AM
Hi Peter You are seeing two issues. First of all the number of files handled by the module is too much. You need to tune your file policy, or tune the advanced section in your access control policy. I figure that you are referring to URL filtering not working as expected. This might be because of encrypted traffic, or the fact that your sensor does not have the amount of memory required to lookup most URLs. You can allow/enable your sensor to lookup unknown URLs in the FMC, and you can allow/enable the FMC to make unknown lookups in the cloud as well. This will bring down the false positives regarding URL filtering.
... View more
11-02-2017
12:45 AM
Hi Collin
That statement is very wrong, regarding Firepower URL lookups.
... View more
10-20-2017
12:08 PM
Hi Glad.Cube@icsme.co I'm not really sure what you want to know. From what you have defined as requirements these appliances will work: 2130 2140 4110 4120 4140 4150 9300-SM24 9300-SM36 9300-SM44
... View more
09-28-2017
12:02 AM
Hi steamos There is no such thing as a VPN module. Either you install FTD or ASA on your SM24, SM36 or SM44 module. At the moment Cisco supports only one kind of operating system on the Security Modules in a single 9300. When that is said, it is possible to install ASA on one module and FTD on the two others. Keep in mind that Cisco TAC might not be able to help you, if you run an unsupported setup.
... View more
Created by
Dennis Perto
in Network Security
in Network Security
09-07-2017
12:14 AM
09-07-2017
12:14 AM
Hi @Ralphy006 Sorry for the late response. I just found this post, and I wanted to accomplish the same as you. I have come up with a two step solution. The first step is to Trust these two applications. (Speedtest.net and fast.com) SpeedTest Netflix Stream Next step is to trust more data from SpeedTest.net's websocket. App is: WebSocket port is: tcp/8080 URL contains these two: speedtest linespeed Kind Regards Dennis
... View more
Created by
Dennis Perto
in Network Security
in Network Security
08-31-2017
05:17 AM
08-31-2017
05:17 AM
Not to my knowledge. You will need to disable the access for the user, and not the IP address, or else your RA VPN scope would run dry at some point.
... View more
Created by
Dennis Perto
in Network Security
in Network Security
08-31-2017
04:20 AM
08-31-2017
04:20 AM
Hi eduardo0407 I have not tried this yet, but I have some thoughts that I would like to share. I don't see a way to quarantine a host from the FMC it self. You would need to use Cisco ISE to handle this part. Make a compliance rule for the network range of your VPN Clients with the Operating Systems, protocols and applications allowed. Make a correlation rule, triggering a Quarantine event for the user in ISE. A search on the web gave me this, to help you with the ISE quarantine part. https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/119370-configure-ise-00.pdf
... View more
08-28-2017
11:10 PM
It should yes. I have my faith in that As long as you do not configure the NGIPSv wrongly and do not install it on a host server with low powered (low GHz) CPU cores.
... View more
08-28-2017
11:02 PM
Definitely. ASAv and NGIPSv will fit your AMP needs. The NGIPSv will give you 150-200Mbit/s inspection on 4 to 8 cores (and 8 gigs of memory). So when the sun is shining, and the traffic is going down hill, you can inspect 1,600Mbit/s of traffic. Then you will need the ASAv to segment the traffic and this of cause also takes up resources. SSD storage will probably not help too much on the NGIPSv, and definitely not on the ASAv, because we use the RAM for the live data and running application code. ASAv is limited in the code it self to not run faster than the license you pay for. SSD will be great for the Firepower Management Center as it needs to make large queries in the databases on disk.
... View more
08-28-2017
10:04 PM
Sure AMP is a part of NGIPSv. You should check if the private cloud appliance will integrate with this. (It should)
... View more
08-28-2017
09:56 PM
The NGIPSv has nothing to do with the ASAv. The NGFWv (also called FTDv) has the ASAv functionality built in. NGIPSv requires 4 CPUs but you are allowed to change this to 8 cores. NGFWv is locked at 4 CPUs.
... View more
02-01-2018
I see that I only have the hardware specs for the 8200 and 8300 series.
They have been posted here. ...
02-01-2018
If you find any data that is incorrect, please contact me and I will
correct this fact sheet.FP82502...
02-01-2018
Some of the specs at least. If you want me to make a post about it, then
I will update you when it i...
01-26-2018
Hi PeterYou are seeing two issues.First of all the number of files
handled by the module is too much...
10-20-2017
Hi Glad.Cube@icsme.coI'm not really sure what you want to know. From
what you have defined as requir...
09-28-2017
Hi steamosThere is no such thing as a VPN module. Either you install FTD
or ASA on your SM24, SM36 o...
09-07-2017
Hi @Ralphy006 Sorry for the late response. I just found this post, and I
wanted to accomplish the sa...
08-31-2017
Not to my knowledge. You will need to disable the access for the user,
and not the IP address, or el...
08-31-2017
Hi eduardo0407I have not tried this yet, but I have some thoughts that I
would like to share.I don't...
08-28-2017
It should yes. I have my faith in that As long as you do not configure
the NGIPSv wrongly and do not...
08-28-2017
Definitely. ASAv and NGIPSv will fit your AMP needs. The NGIPSv will
give you 150-200Mbit/s inspecti...
08-28-2017
Sure AMP is a part of NGIPSv. You should check if the private cloud
appliance will integrate with th...
Public Statistics
| Date Registered | 05-04-2015 03:34 AM |
| Date Last Visited | 03-30-2020 01:38 PM |
| Total Messages Posted | 250 |
| Total Helpful Votes Received | 184 |
Helpful Votes Given To
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
