My organization is ingesting third-party intelligence feeds into our FMC via STIX/TAXII. A default action of block is not supported for this delivery method. Because ours is a sparsely staffed team who fills many widely ranging IT roles, and the feed...
Forum Posts
I need to lock javada1.oracle.com, javadl-esd-secure.oracle.com, java.com and java.net.Can I do this using a FQDN object and a deny access rule? What is the process for blocking subdomains with the ftd?
Hello everyone,We noticed there are computer objects corresponding to our cisco firewalls in the default computers OU of our AD. I'm guessing this was created with the realm configuration we did in the FMC.My question is, can we move those object to ...
I am using Anyconnect VPN in ASA. ASA is done radius AAA to ISE and then to AD. how can ASA assign different group policy in ASA based on the AD user group. Intention is to assign different IP pool in ASA based on the AD user group (user connecting v...
How to enroll into free cyber security course.
After reimaging my Firepower 4110 and downloading the kickstart, system, and manager, I activated and configured all necessary IP's. I am still unable to open the Firepower Chassis Manager Web UI. Any suggestions or questions?
Having hardware issue. not powering on.
This same issue affects my FPR-2110 attempting to upgrade from 7.0.1-84 to 7.0.7-519 or to 7.2.7.500. The system always reboots in a rolled back state without the upgrade having completed.As the work-around seems to suggest creating a new cert, any t...
Hello,I'm trying to add SSL for Decrypt incoming packet from external to internal web server. Is there any impact if i want to execute this?also I'm trying to create certificate and keys for SSL Decryption, but how do i create it? also do i put it in...
Unable to authorize access. If you continue to have difficulty accessing this device, please contact the system administrator. Have erased config 5 times, waited the hour for the system to reboot. 'connect ftd' and local management. I have change...
We have Cisco FTD 2110s that are managed with FMC and we are trying to figure out how to block access to our remote access VPN by IP. We already have a geolocation block for Access Control in FMC. But, are we still not able to do geo-ip-based restric...
Hi Dears, I’m currently managing a Cisco FMC 1000 running version 6.6.4, which oversees 6 Cisco Firepower 2110 firewalls (also on 6.6.4) in an active-standby setup. I’m planning to: Replace the existing FMC 1000 with two FMC 1600 in a high-availabili...
Hello,I'm facing an issue with network connectivity between two firewalls. Here's the setup:Backend Server IP: 10.96.16.245Backend Firewall (Cisco ASA): The default gateway for 10.96.16.1VPN Firewall (Trust IP): 10.96.18.240Problem:From the Backend S...
I'm in a situation where I need to change the port used for Syslogs from the FMC to a server on the same subnet. I was able to change the port with the SFR modules w/o any issues, and I know I can't change the port in the GUI for the FMC itself, but...
How to get performance information from FTD3130 in HA mode. Each FTD 3130 chassi has two-instancies in HA mode as well. How to get performance indicators such as new conn/sec, CPU & Memory Utilization and peakes, throughput, max concurrent session. C...
