Other Security Subjects

Hello. i was wondering why this setup im using doesnt work. I have an asa 5506-x with traffic policing on. I have a service policy rule to limit port tcp/8080 to 3MBit traffic. I have tried to set it up under global, inside and outside interfaces. Th...

Hello Gents, I have issue that my 2911 router is missing some other commands in NBAR2.For example, when i issue command "ip nbar ?" in config terminal, there are only 4 choices.http-services Enable HTTP services (URL to use is /flash/nba...

Hello everyone, I was wondering what are the cisco security solutions who supports containers and docker as a platform instead of VM's. Are .iso/.ova/.tar files supported on container platform?

Presently we have an ASA 5512-x running 9.4.2-6 and with SFR running 6.0.0We have an open case with Cisco as the ASA reloads every day. TAC suggest upgrade to 9.8.4 but the means the SFR also would need upgrading to at least 6.1.0 So I started upgrad...

I have a customer on ISE 2.3 code that needs to be running in FIPS-compliance (which I am interpreting as FIPS140-2). I know we can turn on FIPS-compliant mode to enforce settings for FIPS compliance (cert size, cyphers, etc etc), but is this code le...

I'm working on bringing an "ask the expert" program to you where you can chat, in the community forums, directly with a Cisco expert about a designated topic for a set period of time (24-48 hours or so).  Right now I want to collect your ideas for to...

I have a customer wanting to do TC-NAC with ISE + Tenable.io (not on-prem Security Center).https://community.cisco.com/t5/security-documents/cisco-tc-nac-with-ise-and-tenable-security-center/ta-p/3647543I have looked at several documents but none ref...

Hello I am wondering if there are limitations of ingesting non cisco switch or Access points data into Firepower as far as ability to view end user devices into the FMC logs. I guess my question is can I interoperate Firepower with underlying UNIFI s...

Can anyone at Cisco answer the following question?  I have been waiting for over a month to take the first of the 2 cyber ops certification exams the 210-250.  All of the testing centers have been closed and currently scheduled to reopen/re-evaluate ...

Hi All, On topic of FTD/FMC reading, there are numerous non-cisco books, and the latest published from Cisco Press are from 2017.I'm tempted to get the one from Cisco Press, but I guess a lot has changes since FTD/FMC anno 2017 to present day. Any bo...

Hello, I just want to confirm that if I have an ccess-list that deny ip any any at the end of my config, this will include denying all other tcp or udp (such as deny udp any any eq 135, eq tftp, etc. etc.), right? Here's a config of my router that ru...

Hi Cisco Team, I was checking the Cisco CCIE Security version LAB devices and requirements: Unfortunately, i see most of the software version are very old and most of them are not on Cisco website for downloads. Is there any specific link to download...