Network Security

Hi Experts!Please help me out on the following requirement. Thanks in advance! BACKGROUNDWe have some third party contractors that remote-VPN via Anyconnect on our 5525-x firewall. They are NOT part of our Active Directory. We are deploying ISE in ou...

Hi, lease confirm the below query: In firewall 3 interfaces INSIDE, OUTSIDE, and DMZ. Inside interface connected to our Nexus core switch so please confirm in which interface of firewall we have enabled Netflow?  

Hi community members! Is there a way with Meeraki switching equipment, to dynamically add to the ACL ? e.g. point it to a list I control I want to block certain IPs from a text list. Or at least bulk add if it's not possible for dynamic method. Thank...

So I have some questions here that to me at least are confusing. I really hope someone can clear these questions up. 1)What is the purpose of having thousands of disabled rules. It seems IPS should be all on for rules otherwise what's the point? I me...

All, I am having trouble installing a certificate, self signed or other in my firepower architecture.  Currently configured with a vFMC and ASA firepower module.  Both devices running version 7, problem carried over from 6.X   When I go to request th...

Our regional offices have Firepower FTD devices (without FMC), each with two VTI interfaces to the data center, routing via BGP. We want to use DHCP Relay to point to a remote DHCP server (due to FTD's DHCP lacking needed config options). I don't wan...

Greetings: We are initially configuring a new (my first) Firepower 9300 in Standalone mode (not clustered) for testing with a standard Aviata/JDSU T-Berd 5800 test set and cannot get a successful test.  We have the test set configured properly (works...

Within the advanced tab of the access control policy there is option to set network analysys policy and a default IPS policy. Why would I not just create a blanket IPS policy that has everything in it I want blocked like Maleware/Explots etc rather t...

Hello, does anyone knows a supported and official Cisco method to create and mantain dynamic URL/IP list for Microsoft services like Azure and O365 for Cisco products like FTD and legacy ASA?Microsoft already provide urls or feed to consume and this ...

Hi ...I have cisco firepower 2110 with HA setup. I log into device 1 i get the error, "invalid chassis model. Please contact your administrator" However the secondary pair works that is device 2. Can someone help with the error please?>

Hello,  I would like to ask if there is a way for the FMC to send an email when someone logs in and his IP Thanks and regards, Konstantinos

Hi All,1. How do I export all rules at Intrusion Policy to csv file.I want to know what exact rules are enabled and blocked. 2. Could I export rules at Firepower Recommended Rules Configuration on  Intrusion Policy to csv file. @Instrusion Policy, @F...