Hello Everyone,I wanted to ask for your kind advice regarding the implementation of a dynamic DDoS detection solution along with BGP Flowspec-type actions on a Nexus 5672UP edge switch.Since the Nexus 5672UP does not support BGP Flowspec, my proposed...
Forum Posts
Hi all. I've been facing a dilemma in which we are trying to determine where and how a security policy was deleted. I cannot see it in the audit logs for the past 5 months. Luckily, we have daily backups of the fmc. I am thinking this could be helpfu...
Hello, I want to create a report from cdFMC over network interface statistic from last month. However, looking in the report section of cdFMC, I cannot find any report templates that are available in on-prem FMC. Here is a picture from an on-prem FM...
Hello,Do anyone know where's the menu to see ASA Serial Number VIA ASDM?
Hi guys, anybody encounter issues on upgrading ftd 2110 in HA while HA is suspended? Thanks!
I'm in the process of migrating from older ASA's to FTD's (1220-CXs). I currently have policies on an FMC. I wanted to know if i can migrate existing policies from the FMC to the FTD's? I don't want to build out the access policies on the FMC if i ca...
Hello everyone,I’m currently troubleshooting an issue with a Cisco ASA5515-Edge running in a failover cluster (Primary/Secondary). For the past several days, the cluster has been experiencing intermittent problems that we have not seen before.Issue D...
Hello,My setup is a Cisco Firepower 1120 FTD version 7.6.2.1-3 (FDM). We have 2 ISP outside interfaces. For this we'll name them ISP-A and ISP-B. So currently we have our default internet traffic as well as VPN going through ISP-A. We want to make i...
Good morning: I have a port mirror on an interface.This traffic is causing intrusion events.How can I filter them?I've tried putting this traffic in a trust rule in the access control policy, but it doesn't work.I've also tried putting it in a prefil...
Our current ACAS scans are showing plugin 157288, TLS Version 1.1 Deprecated Protocol findings on Firepower 4120 and Firepower 4125 with FTD devices.The Firepower 4120 is running version 7.2.9,The Firepower 4125 is running version 7.4.2.2I am asking ...
My developer colleague and I (detection engineer) would like to call the following API endpoint:GET/api/fmc_platform/v1/domain/{domainUUID}/audit/configchangesHowever, according to the API documentation this call requires a parameter called sn...
Is there a way to exempt traffic from a packet capture on an FTD firewall running version 7.6? My situation is that I need to know what an ID sensor that sits inside the network (at 172.31.11.224) is sending traffic to. The problem is that the firewa...
Hello I have a problem with mirgration over FMT v7.7.10.4 We've tried to load as the show tech file from ASA/FP so instant connect to ASA, constant error message about object-groups
Hi All, I have learn somewhere we can migrate Asa to FTD (manage on box) via CDO. How we can i free access of CDO for such purpose
How to interrupt command line output on ASA,I try to press "Ctrl + C" ,but no response .
