Hi, Could someone please let me know when will FTD start supporting Clientless VPN and 2 Factor authentication for both Clientless VPN and Anyconnect using Secure Envoy or anyother tool. We need to replace our clients existing firewall with FTD whi...
Forum Posts
Hello, The automatic IPS Signatures updates have ceased since April 2018. Will there be any more signature updates to manually download ? Currently update S1017 running and already 30 days + alarms on IPS for signatures not updated. Jay
Hi Folks, I'm keen to reduce the amount of impact 2 'Apache Struts' remote code execution alerts. I have a couple of questions 1/ should FMC be able to tell if a server is running Apache? 2/ is there a manual setting I can set per server (that is not...
Hi FMC ver 6.2.2 and FTD cluster ver 6.2.2. FMC shows wrong status of cluster nodes. It displays both as active when they are not. Any help please? Thanks
Dears, I am creating a SSL policy and I m not understanding the concept of application column and port column inside the rule, the rule is made of, zone, network, application , users, category port, etc etc As far I know 443 is a SSL encrypted tra...
Dear all, I need to configure qos on cisco asa and prioritize the traffic that goes through VPN. I have 4 mbit of total bandwidth and want guarrantee 2 mbit for vpn traffic. Can any one help me with the configuration ? Thank you..
This might sound strange but I want to have a policy on a 2110 FTD Appliance that does not use Security Intelligence. The firewall is an internal device that is used to screen PCI users from the rest of the network, as such it is not able to commun...
Dear experts, Is one able to rate limit below items when configuring security context on a ASA5520? 1) NAT 2)MAC Learning 3) Stateful packet inspections My understanding is that only ASDM sessions rate and connections rate as well as syslog ms...
Resolved! SNMP Community String Encryption
I need to encrypt the SNMP community string on Cisco IOS switches and ASA firewalls? What is the command to enable the encryption?
Resolved! IOS Password Encryption Algorithm
I need to implement strong encryption algorithm for Cisco IOS and ASA firewalls. How do I achieve this?
Resolved! Upgrading from ASA 5505 to 5515-X Config
Hi, I am in the process of upgrading from an old ASA 5505 running ASA 7.2 to a new ASA 5515-X currently running ASA 9.1 (I will be upgrading). It has a fairly simple setup - It's in routed mode, single context. There is no NAT rules setup according...
Resolved! Cisco ASA 5520 PAT Rule Not Working
Hi Support, I am having problems applying a PAT rule on a ASA 5520 8.2 ASDM 6.1 ( I am aware it needs upgrading). I am basically trying to translate outside connections into a web server using 4443 to redirect to 443 to server 192.168.1.1 (Staff...
Hi everyone, I would like to disable the usb port on the firewall in order to block physical access. But I didn't find the CLI command (ASA v9.8.1) Having tried to search in this forum, people said it is impossible to do. Did someone succeed to...
We have a FTD running on 6.2.2.1 , in transparent mode. we are recently seeing that some traffic is dropped which is matching a pre proccesor rule HI_CLIENT_BARE_BYTE 119:4:1. but this intrusion rule is set to allow in the intrusion policy rules on t...
Below is the firewall config (with all the company info removed) that I'm trying to deploy in our environment.Firewall is in the internal 10.68.48.0/20 subnet, I cannot ping the other internal subnets of the organization - eg, 10.7.0.0/20 subnet from...
