Hi, I'm working with a new FTD HA-setup (Firepower 21x0) that will replace an old ASA-pair. We plan on running the latest 6.2.3.x-patch. The FTD will handle internal traffic only (another FTD HA pair is handling Internet/WAN-traffic). However, th...
Forum Posts
Hi, We will be doing a POV for ASA Firepower services(ASA 5506X) and came across a question about deployment. Our goal is not to touch/impact the network and introduce the ASA Firepower Services into the production with monitor-only mode to analyze t...
Hi, I'm looking at a topology where I have a layer 3 core switch that hosts a SVI for each vlan. I have many 'LAN' vlans where I have computers, voice, wifi etc then I have a number of DMZ vlans also with SVI's on the core switch but I want to use ...
Hello Community members, We are planning to replace Fortigate 100D with Cisco ASA 5510. Is it worth replacing? Any suggestions? pros and cons? Really appreciate. Thanks mates.
Hello, I need to deny any traffic from my internal network to the internet, but I cannot do any any, because I need to logg it and there is so much traffic. I tried to deny traffic from any to outside(interface), but this is not working. I can add...
We have a customer who recently suffered from an unsuccessful attack to/through their MX250 from a country that should not be trying to access their network. I understand that this could have been a hidden address range etc and that it is possible to...
Hi, We have an ASA running FTD 6.2.3 and managed currently via FDM Web UI. By default, there is one access control policy created during setup which allows inside network/interface to connect to "outside" interface for internet. The default action on...
Hello, as the subject implies, whenever i perform an ookla speedtest (http://www.speedtest.net) on any host of my internal network, the following situations occur: 1. at first the download speed decreased gradually and thereafter all internet traff...
Hallo guys, i have a problem. We got a ASA 5512, with one WAN Interface (ouside, 0) and one LAN Interface(inside, 100). Now a user cant access to the Website "https://website.com:8443". Do i need a NAT rule, to translate https, 443 into https 8443?...
Hello everybody, I have a question regarding the ASA and SMTP connection over VPN to my mail gateway. It´s a branch office ASA which is connected over VPN to the hub. Every traffic goes over that VPN tunnel and for the clients behind the ASA ever...
I am having an issue with a pair or newly installed (not yet production) ASA5516-X with Firepower. I am unable to load ASDM get the following error: If I close that pop up and don't press the Exit ASDM button I get: ASA Aversion: 9.9(2)ASDM Vers...
Please help to know the command to export out the rules (like those on the firewall) for the IPS appliances. IPS-4240-K9
Hello all, I need to upgrade a Firepower cluster which is currently running version 6.2.1. The latest version on Cisco.com Donwload page is Firepower Threat Defense SSP FP2K Patch 6.2.3.7.Would it be ok to upgrade directly from version 6.2.1 to this ...
Hi All, I'm after a recommendation regarding ACP rules for a new firepower deployment We have 2 datacentres, each with a separate internet connections that use different IP addresses and have different inbound/outbound security policy requirement...
Hi I have FMC version 6.2.3.7 and I add 4 firepower 8350 on it. I have bought four FTD 4110 recently and I want to add them in my FMC, but when I want to add them, FMC show me below message: “To add Firepower Threat Defense devices, register this con...
