Hi All, Can anyone please confirm if Dynamic Analysis with either Block Malware or Malware Cloud Lookup sends the full file to the AMP cloud or only the SHA value? If it sends the full file, does the AMP cloud delete the file after analysis? Are ther...
Forum Posts
Resolved! How to clear FTD connection ?
Hi Sir: I have two question about FTD session. 1.How to clear the FTD session ? 2.If FTD session was fulled. What happen in the FTD connection ? Can we access to internet again ? Can access to inside from outside user ?
Hi Sir: When I want to integrated with public cloud. I can't link to public cloud. I had tried to ping below server. But I just can ping to one server. I had confimed with FW. The policy from inside to outside is permit all. Could you help to fin...
Resolved! ASA Port Forwarding - 8.3
Good morning all, I'm trying to create a rule on my ASA that will allow the outside to a www on the inside of my network but not having much luck 4Dec 15 201811:06:15106023213.205.192.2133112192.168.6.24580Deny tcp src outside:213.205.192.xx/33112 ds...
Hi, Have been trying to find a replacement for client's 5510. I found 5506-X and based on the data sheet I think that will do the job just fine. There is one location only and the device will be used as a firewall and VPN device for remote users. I...
Hello, I am working on deployment of FMC 1000 appliances in HA for management of FTD appliances. The FMC 1000 has 2 mgmt interfaces. I was trying to figure out if the two interfaces can be configured in a active standby teaming and connect the ap...
Hello all. I'm trying to configure an IPS inline pair between an ASA and Nexus switch. The ASA is currently port-channeled down to the Nexus and I want to implement the Firepower 2130 inline in between them. Is it possible to configure and 2 ether-...
Resolved! Network Discovery Rules
Hi All, I have setup a Network Discovery policy to discovery users, host and application for my internal network address range only. Do I now need to create a monitor rule in my ACP for Network Discovery to work correctly, such as permitting all IP t...
Hello All,I am new to this forum & I'm hoping someone can assist me. I'm desperate! I'm a novice when it comes to firewalls & my current Cisco ASA 5510 was set up by someone else before I started this new position. We are using the Cisco ASDM 7.6 sof...
Hola Amigos!Quisiera saber si es posible realizar bloqueos de página con el Cisco ASA 5505. He intentado algunas opciones pero aun no tengo suerte.Muchas gracias por todo.Saludos cordiales.
I am having an issue with the SSH connectivity groups, it does not let me use SHA256 which means my FIPS 140-2 SALT automation server can't connect in and run commands from the firewall itself. There are options to set the ASDM and VPN exchanges, bu...
Resolved! FirePower task running indefinitely
Hi,On my firepower, 2 tasks are running indefinitely (1 waiting and 1 running) despite rebooting management firepower and FP Modules Task 1 : LDAP DownloadTask 2 Insttalingh Saurcefire Geolocation Database update Any help how to chnage this behaviour...
Hello, Our ASA 5506 shows a MAC address for its Mgmt1/1 interface other than the one learnt by a neighbor switch. I tried to locate Management1/1 's MAC address by issuing the following commands on the Firewall :show interface | i Int|MACshow vers | ...
Hi, guys, The problem may be found, it is due to the service-policies do not work on VLAN1 and VLAN5. I tried to clear stats counters of the service-policy, but only work on vlan160....which means service-policy on VLAN1 & VLAN5 don't work. Anyway to...
Resolved! ASA 5510 site to site VPN
Hi guys,I am trying to use ASA 5510 to create a site to site VPN. After follow configuration guide, I don't see it is trying to establish the connection.Configuration guide:https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-ge...
