Network Security

Hi, I have a bunch of 5525-x running 9.8.2.20 and starting to upgrade them, the first thing I do is update the ASDM version & check it works.  So when I enable ASDM 7.13.1 as the current image, it works, says it needs to upgrade the launcher on my PC...

So on our routers I can do a "show policy-map interface gi0/0", and it will tell me the current QoS usage on that interface with our policy. Is there a way to do that on an FTD? Attached is a picture of the QoS policy we have for our guest subnet at ...

Hi Guys, Im replacing an ASA 5510 which is currently acting as the secondary in a failover setup.Cisco has recommended me with ASA5516.Is there any need of additional licenses to be purchased along with AASA 5516 ? This is my current licenses in the ...

Hi Experts,  We are configuring SNMP on our Firepower-2130 from Firepower management Center(FMC) GUI for Integration with NMS tool. --> Configured SNMP receiver (i.e. NMS Server IP) , SNMP Version : 2 , TRAPs, Assigned a Interface as well.All details...

Hello, Currently I am running FMC 4000 with 6.4.0.4 ( Build 34 ). Planning to Patch FMC so that I can remove below both Vulnerability 1. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191112-asa-ftd-lua-rce ----where...

We have a tunnel from our main office to our DR site.  We have Veeam replication jobs to this DR site and during a job I noticed we are losing packets.  Our data center provider saw that we were hitting the 40mbps Policer set on their equipment.  We ...

I am newbie to the firewall config arena. I have an ASA 5510 that I have created a basic config for to access the internet. I am connecting to the firewall through the LAN and I am able to ping it and access the config via the ASDM. If I console in I...

Hello Experts, I would like to know: 1) What are the best practices while deploying Cisco Firepower (FTD / IPS) in standalone/ HA/ cluster? Sometimes it just look like the boxes can't handle traffic no matter the design (I may be wrong but we mostly ...

I am trying to block IKE traffic incoming to the ASA using ACL applied on control-plane but it doesn't seem to block those requests.Below is my config:object-group network IPSEC_TUNNEL_IP network-object host 1.2.3.4 network-object host 2.3.4.5 acc...

I need to remove one line of code in a Cisco 2811 router, without removing the entire ACL. I'm used to making these changes in firewalls, but have figured out it's a little different in the router. Can someone provide me with some instruction? I hear...

When filtering snort rules by Microsoft Vulnerabilities category the CVE numbers only go up to CVE-2017-022 ? Is this a bug or missing an update ?From the FMC Object>Intrusion Rules>Priority>server-webapp.rules (3818)>Rule Documentation (1:52130:1) f...

Hi,I am hardy consider to know that how would be possible to block some IPs in a network?shall I block the IPs using firewall, if I'm right how should I use with API?I'm new with this topic, but I will appreciate your answer to inform me.Thanks

 We have an asa 5512 with a 100Mb external line connected to port 1/1. Connected for internal we have 2 networks on 1/2 and 1/3. The issue we have is users keep maxing one of the networks restricting the other one. How can we limit interfaces 1/2 and...