I set up a basic configuration on a 5540. After testing, it seems that the device is letting everything in, Web traffic, imap(993), and several other things. I had intended to set up some access lists to allow certain things in from specific IP add...
Forum Posts
Resolved! Firepower threat defense and EEM
I see an option under the system support diagnostic-cli to run an event applet, but how is an EEM applet created in an FTD? thank you, Bill
Have you tried newly released Firepower migration tool yet? Wonder why they claim it only supports Chrome? Seems to be working fine in FF as well...
I keep getting this error message that one of the interfaces on my HA standby unit is not receiving any packets. Cisco is telling me that is normal since the primary is processing all the traffic. Makes sense to me, but why am I not getting the same ...
We are migrating from a juniper netscreen to a Cisco ASA running on a firepower chassis. My question is, can I have two diff BGP ASs on the Cisco ASA and also OSPF without any issue? OS version 9.6.4.8 Thanks.
I am not sure if this forum is appropriate as I do not see much discussion available for Merak but anyways here goes Does anyone know if the Meraki MX can be used as FMC does for Firepower in that for the Meraki network would allow to create specif...
I've done everything I can to fix this beast and am wondering what are my options. I'm trying to get HTTPS traffic over a VPN tunnel, I've modified the group policy and the inside interface is an ANY ANY ACL. i'm wondering if applying an ANY ANY AC...
Resolved! FMC policy configuration problem
hello，everyoneI am confused about two FMC policy Configuration problem，question one：on the advance config of the access control policy , As shown in the following figure:when I chose this option ,invoking intrusion policy on here ,is that mean intru...
Can someone please help me figure out why I can't ping from my Azure VM to any on-premises devices? I've added exclusions for ICMP in Windows Firewalls on both sides and can successfully ping from on-prem (i.e. 192.168.1.90) to an Azure VM (i.e. 10.0...
Hi, Does anyone know if PBR on the new ASAs to solve the following scenario? Or is there a better option? I need to send outbound SMTP traffic out to a separate physical port from the main one. I have a stateless security device that filters inboun...
I need to know for a client if the Cisco ASA 5506-X Network Security Firewall with Security Plus License is compliant with this security question: Does the agency ensure that boundary protection devices do not release unauthorized information if a ...
Hello I have a 5505 that I can't access the outside network from the inside. I can ping from the firewall outside. From inside connected to my laptop I can ping my gateway but can't ping outside or browse the web. I'm inspecting icmp and I set the DN...
Resolved! ASA 5506-X Transparent Mode Help
I have a legacy PC (XP) running legacy software that has to be on the same subnet , however we need to put it behind a firewall. I put the ASA in transparent mode and assigned BVI1 an IP address. I need ports 4000 966 and 950 as well as letting a...
Resolved! Firepower Management Centre 2000 licensing question on Max number of Firepower SFR modules
We have Firepower Management Centre 2000 appliances (Cisco part number: FS2000-K9) which manage Firepower SFR software modules which exist on Cisco ASA 5500-X series appliances. In terms of licencing: We are using Classic licencing (rather than Sma...
