BGP Path Selection
BGP uses several attributes or metrics for the path selection process, this post discusses the BGP attributes used on Cisco IOS-XE routers/switches for path selection and provides configurations examples of…
FTD NAT Reflection
NAT Reflection on the FTD or ASA is a technique to allow communication of internal devices to access a server(s) located in either internal network or a DMZ, but by…
FTD registration with FMC
If using the Cisco Firepower Management Center (FMC) to manage sensors such as the FTD, secure communication must be established between the FMC and the FTD. A registration key is…
Securing FTD TLS Ciphers
When using a Cisco FTD firewall for SSL/TLS Remote Access VPN, the appliance is enabled by default with TLS versions 1.0, 1.1 and 1.2. TLS versions 1.0 and 1.1 are…
ASA Traffic Zones
ASA Traffic Zones The Cisco ASA supports Equal-Cost multi-Path (ECMP) using Traffic Zones feature. Multiple interfaces (up to 8) are assigned to a Traffic Zone, which lets traffic from an…
ASA Interface High Availability
The Cisco ASA software image running on either Firepower or ASA hardware supports interface high availability using PortChannel/Etherchannel and Redundant interfaces. This post covers describes both solutions and provides information…