Network Security

Hello,I was just wondering if anyone knows what URLs are reached out to by FMC for URL filtering automatic updates as we are getting a URL Filtering Download Failure we are using 6.4.0.11 from documentation it seems like Automatic URL updates will us...

Hello everyone, I need help upgrading Cisco FMC VM. Current FMC version is 6.2.2.5, from cisco upgrade path doc I found that its possible to upgrade directly to version 6.4.0. Since we have two CISCO ASA 5515x devices in Active/Standby setup, should ...

guys this might be a running thread already.I am using an FDM for sometime. Recently purchased FMC. Can I add FDM/FTD (firepower device) to FMC without loosing any FDM config.Is there an option to import Firepower config to FMC.

We've deployed FTD HA managed by FMC in our DC and it was running normal until the secondary FTD state become disabled itself a few days ago.We've no idea why the secondary FTD went disabled by itself but we planned to work with TAC while applying fo...

Hello.I'm working with Cisco FMC 6.6.0, and I'm trying to execute the following API call using the API explorer:/api/fmc_config/v1/domain/{domainUUID}/devices/devicerecords/{containerUUID}/operational/commandsFMC API reference for this call:https://w...

Is it overkill to have threat detection scanning on an ASA 5516 with Firepower services? Can I get the same and better protection from Firepower only?The reason for my question is that I get several tickets a day to un-shun VPN users. It's not always...

Community, I am trying to understand what a "Netflow Equivalent Syslog" is but am having trouble finding any adequate explanation. There is an option in the FMC to enable "Netflow Equivalent Syslogs" in the syslog settings of the FMC, but I am not qu...

I'm working on a project that needs SSL Decrypt-Resign implemented.  I understand that I need a Subordinate CA cert in order for this to happen, however I am a little unsure as to exactly what the SubCA cert should be issued to:- is it to FMC which t...

We are receiving this event "EXPLOIT-KIT Gong Da exploit kit possible jar download (1:27706:3)" from Cisco Firepower IPS.  We tried to find which file in our server is causing this event, and from the IPS Pack Text we found this: Packet Text ....l@.....

Is there any issue with running a port-channel between separate modules within a 4110 chassis? Im assuming no, but I haven't located supporting documentation. 

Hi, Using an FMC. I turned on SNMP alerts for Intrusion Impact Alerts. Traps came through, but it's not showing all of the relevant OIDs that are possible given the Enterprise number. How can I enrich the SNMP traps coming from the FMC to show more o...