Dear Expert, I am deploying a cisco firepower and don't want to use mgt port. I want to use outside interface ip address to the sfr module. Is is possible?? Please suggest. Thanks....
Forum Posts
I used "no http server enable" & also removed any configuration related to ASDM. I also removed all static nat statements. When I port scan my ASA public address I still see the ports open hours later. Goodyear# sh run: Saved:: Serial Number:...
I am a novice with Cisco so bare with me. When I am at work and connect my MAC BOOK to WiFi I can't connect to VPN. When I use my phone as a hot spot its fine. I am trying to look at the config to see how it is being blocked but not sure where to ...
Having an issue accessing web server from public internet. I set up some PAT rules & permitted the traffic in my outside acl. When I do a packet tracer it says my ASA is configured to allow access to the server from the outside which I include below....
I have One Firewall cluster (Two Firepower 4120) with port-channel configuration to Cisco Nexus 7K with VPC. There lots of drops on Firepower Port-channel2.86 interface and no drops on Cisco Nexus 7K VPC interface. Here is output of Port-channel2...
What could be the possible reason for a SYN Timeout when an ACL rule is set for that specific traffic? I am thinking that something on the remote side is causing the handshake to not complete. But could there be any other possibilites that would caus...
Hi Everyone, With reference to the Subject mentioned has been chasing by Cisco TAC team also. Is anyone have idea about the issue described below. FTD Box 2120 managing locally by FDM. All are running good, but unexpectedly FDM Management Inter...
Is there a way to NAT port 443 and 80? If so, how does it work if a user goes to http and https? thank you! LN
When the command "sho access-list" is performed, it allows the admin to see what hit counts have occured against each line within an Access-list statement. However it does not show a hit count with reference to object groups in the ACL.How can one d...
This may be an obvious answer - as in a bad idea - but is there no way to have the FMC/FPwr sensors generate an email alert when being portscanned? The policy is working and dropping traffic as it should, and has been - but I can't find the proper i...
I am running an ASA5506 with Firepower and FMC 6.2.2.2, and have a question about how rules interact. Please pardon me if this has been asked and answered. I searched through the posts but did not see an answer. My question is about inspecting the ...
After upgrading to 6.2.2.2-109 I received a warning that the application rule doesn't match any applications. The rule was set to match evasive/stealth tactics. When I check the rule, there's no tags or categories available. Was this removed ...
I want to make sure I'm not missing an alternative to managing FTD with FMC over IPSec.Currently my FTD installations at remote locations are anxiety-ridden. I'm fortunate in that I've been able to lab the FTD locally and deploy a config from our FMC...
ASA5506 ver. 5.4.1 When I try to upload an update file (Network Sensor Parch 5.4.1.8) from my computer in ASDM console, I get an error Bad Gateway "The proxy server received an invalid respose from an upstream server”.
I am using Cisco ASDM 7.3 for ASA on our network and am getting the following errors. I am a novice to Cisco firewall so any help would truly be appreciated. Thanks in advance. Here is the error: Deny inbound UDP from 172.16.0.2/1645 to 10.0.0.30/1...
