Network Security

FTD Registration to FMC different subnets

Scenario: We will be deploying several FTD in different locations. FMC communication will all be private IPs (No NAT involved). It will be all just different subnets. FTD --> Router --> Router --> FMC We followed the deployment guide, FMC seems ...

Resolved! ASA 5512-X Unable to Ping Management Port IP

Hey everyone. On Firepower it shows that my firewall is disabled. I think it could be due to the management IP address, but I'm not sure. Is the management ip on Firepower supposed to match the management ip that's in my ASA? In addition, whenever ...

FTD 2110 and IKEv1 VPN site to site tunnels to 3rd parties

Hi guys, I am about to pull the trigger on refreshing our old ASA's with 2110 FTD devices however I was just wanting to double check that they will support Site to site IKEv1 VPN to 3rd party equipment? (not sure if its cisco etc) I read on the fir...

Resolved! ASA vs Sophos

We are running a cisco 5510 and looking to upgrade it. Recently a company sale person came and give us a pitch for sophos 650 and wanted to sell us. I being using cisco product for long time and find them reliable and like the command line from switc...

Firepower 2100 FTD VPN

When creating a site to site VPN on the FMC for FTD devices, is it possible to create a backup VPN for another site? for example if site A normally has a VPN to site B but should site B be unavailable can site C be configured as a backup? This doesn'...

Resolved! ASA 5505 Slow internet high CRC

I am experiencing slow internet connection. This week I upgraded my connection to 50/10 but when I run speedtest I am only getting 10/5 (which was my old speed). These are some of the commands I've run: sh int e0/0 Interface Ethernet0/0 "", is u...

Resolved! Syslog Server Log Format

Hello, We configured Syslog server on FMC and the intrusion even logs being forwarded from the FMC to the Syslog Server. In the Syslog Log Format, there is no interface information. May I know is there any way to configure the Syslog to contain th...

Resolved! SSL Self Signed Certificate Findings on Nessus Scans on Cisco 3750 - 24PS-E

When our IA team performed security scans, an SSL Self-Signed medium finding was discovered along with other SSL findings. How do I resolve this issue? We do not use a CA, just a generated cipher and cert by the switch itself along with all the other...

Presence API failed to login

We are attempting to integrate the presence API into a custom directory application displaying a user's presence. I've read through the Developer Guide on how to accomplish this and we're running into an issue with logging in an app-user. I've tried ...

Resolved! FTD object creation automation

HI , I need to create an object with 100 network in it. Is there an easier way to automatically create the object (from an excel sheet) rather than do it manually ? Thanks

Threat-Detection Feature Blocking Traffic

How can I prevent the threat-detection from blocking assess to an IP? I have disabled the basic threat-detection and have included that IP in the exception list. I rebooted the ASA to make sure that there everything is released from memory but whe...

Resolved! ASDM reports wrong available flash

Hi Guys, thanks for an awesome resource! My ASDM reports the following available flash: I've tried a couple of ASDM versions - back to 7.8.1-151. All show the same garbled output. Just wanted to see if this is a confirmed bug or if anyone else ...