Hi Everyone When policies has changed (multiple times) and you need to deploy a Policy. How can you verify the Difference / how can you compare the - Policy to deploy - with the - Policy deployed? before you kick of the task? Accordingly to the F...
Forum Posts
I am looking for some baseline config values for the Rate-Based Attack Prevention in Network Analysis Policy for a FTD in routed mode (Edge Firewall). Coming from an ASA, the configurable values are totally different on the FTD and does not transl...
I am researching using dhcp relay over a vpn and I have some questions. I'm using the doc linked below for reference. My questions are: 1) One of the prerequisites is "You must be directly connected to the security appliance and cannot send requests ...
Hi, I have a serious doubt about the Security plus licensing, so I'm looking for some help. When I try to install a security Plus license on a 5512-X appliance, We got the following message: right now We have 250 anyconnect essentials licenses, If...
I would like to change the hostname of two FirePower 4100 systems which are in HA active/passive mode between the two systems on the installed ASA 9.7 code. The ASA hostname was changed just fine. When I try to change the FirePower chassis hostname v...
Hi, I need to redirect traffic destined for port 444 to port 443 on outside interface. Basically same functionality as linux iptables: *nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 444 -j REDIRECT --to-port 443 This is what i did (it's asav983-8...
Dear Community, I have FMC install on ESXI. FMC and Sourcefire both are on the same vlan. When i install the new FMC on ESXI, Sourcefire added normally on the FMC but policy was not deploying, So when i try to re-add the Sourcefire now the Sourcefi...
I have recently configured a 5506 with a firepower module but I can't use firepower module via ASDM plase halp me. ciscoasa# show version Cisco Adaptive Security Appliance Software Version 9.5(2) Device Manager Version 7.5(2) ------------------...
Can someone help if it possible to delete custom signature directly to sensor.
Resolved! asa with firepower vs twice nat
i neet to replace my asa 5515 with asa5516x with firepower. i'm using nat on asa connected outside to peplink and a have other nat configured on ISP router so i need to know if the twice nat (1st asa and 2nd on ISP router) can creat any trouble for...
Hello, I have been trying to figure out how to block port 80 from outside my network to a specific server. I want to allow only port 8081 to be accessed. Currently when I setup an access rule to block http it blocks all access to the server from outs...
This is NOT a java issue. I repeat this is NOT a java issue. After I reload the firewall, everything works as expected. 3-4 days later ASDM and Anyconnect stop working. Error: "could not load file/URL asdm.jnlp". I am able to ping and ssh into t...
This session will provide an opportunity to learn and ask questions about how to troubleshoot issues with the Cisco Adaptive Security Appliance (ASAs), such as crashes, high CPUs, and other common issues. To participate in this event, ask your que...
Having now been able to use VTI on recent ASA code, is there similar config / setup available for FTD appliances running FTD image?
Hi allOur Cisco 5550 rebooted today and we can see there is some crashinfo with the command:show crashinfoHowever, the text output is very long and I'd like to copy this file onto my PC rather than looking through the serial port session. I can't see...
