About markus.albisser1

markus.albisser1 · 12-21-2020

Dear all I have a short question to you guys, when I run a capture on the outside (Internet) interface of an ASA-5545 (the ASA has the SFR module installed and acts as a NGFW) with the following command:capture capin interface outside match ip host 1...

markus.albisser1 · 09-20-2020

Hi all I found a very strange setup of one of our partner in the network, wondering what this community think about it. About the security of the fact to have Internet and private networks on the same link. Here are the details: - There is an edge ro...

markus.albisser1 · 03-31-2020

Hi all A pen test shows us that several resources which are published to the Outside via an ASA-5545 (also with a Firepower device attached to the ASA as a module) replies on the ports tcp/2000 and tcp/5060, which is the Skinny and SIP protocol. Even...

markus.albisser1 · 03-12-2020

Hi all Can someone answer the question how many Active Directory domains can be handled with one instance of an ISE-PIC? The number I found is up to 100 domain controllers are supported (via a client or WMI), but are these DCs from one domain or mult...

markus.albisser1 · 02-27-2020

Hi all I am just wondering what other guys are doing, working with Firepower, when they quickly want to log a blocked request from a client? Similar to the ASDM logging windows we have with the ASA firewalls, there where we can simply add the IP addr...

markus.albisser1 · 12-21-2020

Great diagram, thanks Balaji for this post. This is what I looked for. Together with Marvin's answer below, this answers my question. Thank youMarkus

markus.albisser1 · 12-21-2020

Hi Balaji Thank you for this link. Helpful troubleshooting steps when logging on the SFR module! This is what I can do, check the logging there and compare it with the capture from the ASA. Nevermind, do you know if the ASA capture is really on the i...

markus.albisser1 · 12-01-2020

Hi Hrvoje Unfortunately not, FP actually does not support MFA on their internal Captive Portal. For the moment we cannot go into this direction. It is open on our side in which direction we go, either if MFA is an absolute need we have to evaluate a...

markus.albisser1 · 09-21-2020

Hi Balaji Thank you for your reply. I attached a PDF here from the situation. That you can see we have 3 VLANs within the main site, but then the rest of the provider network is just one network without any VLANs or VRFs. Traffic is just routed throu...

markus.albisser1 · 09-14-2020

Hi Florin The trick in our situation was to change the setting from "set default-voip-alg-mode proxy-based" to "set default-voip-alg-mode kernel-helper-based". There are no ACLs which blocks the traffic. Because we don't use VoIP via this Fortigate w...

Member Since	‎04-03-2008 04:31 AM
Date Last Visited	‎09-22-2021 12:21 AM
Posts	55
Total Helpful Votes Received	10

User Statistics

User Activity

ASA capture with SFR

Internet and inside network on the same link

ASA ports 2000 and 5060 open to outside

ISE-PIC and number of domains

Logging in Firepower

Re: ASA capture with SFR

Re: ASA capture with SFR

Re: Multi-factor authentication for Captive Portal on FTD

Re: Internet and inside network on the same link

Re: ASA ports 2000 and 5060 open to outside