Hi Group any idea how this could happen in zone based firewall: sh policy-map type inspect zone-pair sessions Zone-pair: Guest->Internet Service-policy inspect : Guest_to_Internet Class-map: Guest_Protocols (match-any) Match: protocol http Match: pr...
Hi, I have a working AnyConnect 4.6 remote access VPN solution in place on a Cisco FTD 2110 and FMC on software code 6.2.3.5. All user traffic comes via the VPN, no split-tunneling. Now I want to apply a VPN Filter ACL to the group policy to rest...
Hi, I want to restart my SNORT process, will it drop traffic? Is there any way to restart SNORT without any dropping of traffic? Thanks
Hi all, i have just deployed a firepower in a vm environment, i have also just activated the smart license evaluation mode. i'm task to add a sensor on the firepower management center, where do i download the sensor for fmc in cisco support. my cu...
Unencrypted malware blocking is working fine. If you implement a SSL decryption policy for HTTPS web traffic and configure an ACP rule to inspect the HTTPS traffic for malware, one of two things will happen: 1. Either the Firepower module will de...
Hi guys, Does anyone know if it's possible to block using Firepower all browsers but one (let's say Chrome). So in terms of old firewall rules way: Rule no1 - allow browser Chrome Rule no2 - deny any other browser I found a hint (tracking User-...
Hi, Can someone tell me how to check or view temporary self signed certificate generated by ASA using CLI? Also, is temporary self signed certificate generated once command "http server enable" is entered? And, what happens if disable http server a...
Dears, Please find the attached Please suggest when 6509 are in VSS mode how the connection should be. The access switch is connected to both core with Multi chassis Ether channel, ,,, the user traffic is hash in default algorithm of the port cha...
Hi guys, i have two ASA 5540 firewalls working in stack, unfortunately one of them was broke up. some power issue or something like that... my question is, i have one ASA 5545X in spare. Can i substitute the 5540 for the 5545 with no problem? tha...
I am getting the log below: Deny udp src outside:192.168.20.11/21002 dst identity:239.224.20.7/1007 by access-group "outside_access_in" The systems (192.168.20.11) sits on the outside port of the firewall and does the streaming to 239.224.20.7/100...
Hi, I need to configure an Firepower 2110 so that it has two Ouside interfaces. Offcourse, I will put an Default Gateway route on interface Outside_1 and I wil have all my traffic go this direction. But I need e.g. that my second, Outside_2, interf...
I would like to configure a VPN between an FTD appliance and another Cisco appliance, specifically an ASA and an IOS router. Usually I use VTI tunnels so I can create a tunnel per-internet connection. I'm a bit unsure on the capability of FTD at the ...
Hi I recently started to receive this auth prompt in asdm for comodo ocsp url? I changed the anyconnect certificate about 2 weeks ago, and this is the third time I've gotten the prompt. Any help? Br, Michael
Helllo , We have 2 level of firewalls at my company. We have 1 DMZ sitting on the perimeter and a cisco firepower acting as internal/core firewall. We have an exchange server that should be publicly be accessible. Where do you recommend putting t...
Hi, Recently we have migrated to FTD 4100 from ASA 5585. Our system team runs scripts on the server using the putty session to the servers these scripts runs for hours .Earlier with 5585 these ssh sessions used to work properly but after migration ...
