Hi, So i want to prevent DoS attack to my server. To do that on firepower, i can use dynamic state rules to block traffic if frequency has been reach. The problem is, i can only block traffic and not the user. So if the user try to do DoS on my serve...
Forum Posts
Hello,Is the a way to get access to the Linux filesystem on Firepower 2130 with ASA software? Like #expert command on FTD?
This is my scenario:I am trying to move the webserver, ntp server, and some other internet-based servers to DMZ. I have re-imaged ASA to FTD, managed by FDM. I have some knowledge on configuring using cli, however, not much on FDM. I have configured ...
Hi AllHope you are doing fine.Recently I came across a DoS-related article which is as followshttps://geneva.cs.umd.edu/posts/usenix21-weaponizing-censors/Can anyone help me Protect TCP Middlebox Reflection by Cisco Firewall or any other solution lik...
I setup File Policy by just watching a video on how to do so. I am not sure how the policy actually works. Looking at the below are these files actually all being scanned for maleware in the cloud??? How do I know I am setting things up properly and ...
Resolved! Reimage FMC, need to configure FTD?
Hi, so Im planning to reimage my FMC, but before doing that i need to know what gonna happen if i do that.I want to know if i reimage the FMC, do the FTDs will forget about the FMC and i have to config them manually on site or there other way to conf...
Hi teams, I'd like to know FMC's malware detection feature. As far as I know, AMP(Malware) license of FMC should work online because of sandboxing the files from Cisco TALOS. If the FMC is installed in closed network environment, how can I detect s...
Hi All,I have setup FTD and trying to ping FTD from another linux system. I am able to ping the FTD and getting response in linux command line, but not able to check the communication in the FTD CLI. I tried to run the command : debug icmp tracebut I...
Hello, everyone. We have implemented Anyconnect RA VPN on FTD device. However now i want to restrict from which source global IP Addresses i can connect to. I now in ASA it can be done by control-plane ACL but in FTD i do not see any place to configu...
Hi, I have an issue with changing NTP and DNS values on my HA of FTD2110. The 2 FTDs are connected to my FMC. I could not find how to change the NTP servers or the DNS servers > show ntpNTP Server : 127.127.1.1Status : UnknownOffset : 0.000 ...
Resolved! Access DMZ from VPN
Hello,I'm using ASA version 9.1, and ASDM version 7.1.When connecting from my VPN using AnyConnect VPN client, I can access computers in my LAN without any issue.I cannot access anything on the DMZ.My lan is 172.20.20.xMy DMZ is 172.21.20.xand my VPN...
Hi there,We are trying to implement PBR on FTD v7.0.4 managing by FDM. The route-map object has been created by Smart CLI and could be verified in 'running.conf'. While applying the route-map object, although the task was completed, I couldn't find t...
We're using FTD 2100 with FMC, need to get active RA VPN sessions counter over SNMP.Information I've found is related to ASA and not suitable for FP.Can anybody share useful FP OIDs or point to documentation links?
Resolved! Firepower Management center
Hi everyone, When i try to add the firepower sensor to FMC it shows this massage (Could not establish a connection with sensor. Make sure the registration keys match, that the software versions are compatible, and that the network is not blocking th...
Hello, I have a layer 3 switch (Cisco Catalyst 3650) with multiple vlans configured on it, and connect to this switch to inside interface of ASA.My goal is make all vlans can go through firewall and asa route beetween VLAN-s not Layer3 switch.Inside ...
