Hi, I am trying to create a policy on the FMC so that any DNS queries from one specific network get sent on to Umbrella for DNS validation. I can see we can add an Umbrella DNS policy and select the Umbrella policy. We can then tie that to an ACP. Wh...
Forum Posts
Dear Team, 1) Head Office --- Firepower 1010 firewall 2) Branch office --- Firepower 1010 firewall Requirement below:- Only few URL's traffic burst out in branch office ISP and remaining all application or internet access and internal server all...
Hello All,In my company we have run tenable scan and we have Vulnerability in Cisco switch Catalyst 3850 48 Port PoE SNMP Agent Default Community Name (public)Can you help to fix this issue ? Can any one help in this issue.
HelloWe have a lot of clients getting the following error when contacting diffrent sites: ERR_SSL_PROTOCOL_ERROR, we have read that SonicWall and Palo Alto also have these problemes. Solution is to turn off "TLS 1.3 Hybridized Kyber Support" in chro...
Hi team,You know the nice search bar on the FMC Web UI where you can put in an IP and it just finds the rules matching it? Is there an equivalent API call for that? Thanks!Difan
Hello,I'm trying to configure Cisco Secure Firewall ACP File Policy to exclude Windows Updates from being scanned. I inserted an ACP rule just above the rule with the File Policy. It simply allows traffic to Microsoft Updates or Windows Updates with ...
I have Cisco FMC(Firepower Management Center) and want to renewal license FMC but base from information cisco web, we must migrate old SKU license to new SKU License. I have open case from https://customerservice.cloudapps.cisco.com/ to migrate the S...
ASA 5555x with firepower - 9.14 latest interimSFR modules and FPMCv at 6.4 latest interimSuddenly on a Monday morning at 8am, latency through our ASA 5555x firewall spiked from its usual <10ms to over 3000ms and started dropping packets. Voice calls ...
Resolved! Revert ASDM on ASA 5505 unit
I needed to upgrade my ASDM and ASA software on my firewall so I could access it via my Vista machine. I talked with a Cisco Tech and he pointed me to a could of links to down load 602 ASDM and 802 ASA bin files. I did the ASDM first uploaded the bi...
I am new to Cisco firewall products.We are setting up a Network Management Solution. I can get SNMP data from the Cisco Switches on the same network, but cannot get the FPR1150 data. SNMPv3 is configured on the firewalls and in the NMS system. I c...
Hi,I'm in need of some help here. We lost internet connection. I checked ASA syslog, I found that ASA was displaying disallowing new connections on the ASDM syslog: Syslog ID: 201008: Disallowing new connections I did a google search and didn't yield...
FTD: 3130FMC: 1700FMC on-net and in HA with databases synchonised. Time set correctly. FTD management interface is on the same subnet as FMC. Only interface connected is management interface. FTD can ping FMC and FMC can ping FTD.Try to add FTD as a...
Hi All, Trying to carve out a DMZ zone on my 5506 without buying a switch (budget freeze). If I use bridge-group in the following configuration, does this effectively allow all of the devices I plug into the bridge-group assigned ports to be on the ...
Can we configure ip sla Monitor object using zone that consists both interfaces i.e isp1 and isp2. Basically my requirement is if one interfaces fails the traffic should divert to secondary isp. Below link I'm following to do the configuration https...
In my SSL/decryption policy advanced settings I have chosen the option to block unknown cipher suites and therefore in my connection logs I see lots of connections that are blocked due to unknown cipher suites, which is expected. However, the partic...
