On firewalls such as the Cisco ASA, is it sufficient to allow only port 21/tcp in order to permit FTP Active Mode data transfer?Client → Server (21/tcp)Server (20/tcp) → ClientIf I allow port 21/tcp, will the system track the data connection and auto...
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Hello,Managing certificates is getting more and more a nightmare as the valid lifetime will be reduced to 47 days, especially on devices and virtual appliances that don't support any kind of automatic renewal protocol.What are the options in FMC to a...
Hi all,I'm a student doing home-lab practice with an ASA 5500-X / FirePOWER setup. Cisco has since removed these files from the download portal, so I can't verify them against the official checksum anymore.Could someone who downloaded these directly ...
Hello , i have an ASA firewall ( 5525) and i want to configure a scheduled backup , is there any documentation about this please ?best regard
Hi All, I have an active/standby pair of ASAs in transparent mode. 5515x running 9.1 (2). I have been trying to test failover by issuing the no failover active command on the primary. I thought that when I done this on the primary/active unit it woul...
I have a pair of FPR2130 running ASA code in HA. Everything looks configured OK to me, though obviously there's an issue somewhere! sho failover presents no errors.I need to failover to compete a firmware upgrade, however when via the primary device ...
Hi All FTD 3105 : the disk /dev/nvme1n1 is unable to be unlocked or reverted with the existing SED key We have a new 3105, displaying the following message. When we proceed it reverts to the same screen. After a couple of reboots, it shows the...
Hi everyone,I'm developing a firewall configuration-audit/parser tool and I'm looking for a genuine factory-default Cisco Firepower Threat Defense (FTD) configuration for testing.I'm particularly interested in:- FPR-2110- FPR-2120- FPR-2130- FPR-2140...
Hello everyone,I’m working with a Cisco Secure Firewall 1210CE Threat Defense running software version 7.6.4-69, protecting a small LAN.To improve security, I segmented the network into two VLANs:VLAN1 – 192.168.0.0/24: Oracle Database Server 19c on ...
Recently, an interviewer asks me about Active/Standby HA. His question was what'll happen if the tcp ack get's back from the standby firewall, considering the configuration is stateful which means state tables were shared between both.In my opinion t...
Hello all, I wanted to see if anyone knew if i am able to download and push the newest secure client software on our older ASA. We currently use anyconnect ver 4.10 and would like to get this higher prior to our migration to FMC. I only see Secure Cl...
Hi,We have 5 FMC servers which have been upgraded recently from 7.4.2 to 7.6.5. I found out that since then the daily backup of the FMC server towards a Linux server (Ubuntu 20.04) is not working anymore. The firewalls are still running on version 7....
I am trying to migrate FPR 2100 FTD to FPR 3105 FTD. Both of them are managed by the same FMC. The FPR3105 has only one configured interface: the management interface. When I use the migration from the FMC, it fails after mapping the interface. Any r...
I have a couple Firepower firewalls that run ASA image. Should I change the image to FTD? In that case should I use FMC or managing the FTD via FDM would be enough?As far as I know FMC provides more features that configuring an FTD via FDM, isn't it?...
