Hello Team, I have a NSS322 and recently ransomware attacked in my network so i just reset my NSS322 and try to configure again but unfortunately i am not able to configure my NSS322 like previous setting. Now my previous setting is my NSS IP is ...
Forum Posts
some extract from cisco guide:"Verifying Pre-Fragmentation For IPSec VPNsTo verify that this feature is enabled, consult the interface statistics on the encrypting router and the decrypting router. If fragmentation occurs on the encrypting router, an...
Hello community is it possible to block P2P traffic on Cisco RV320 ? I did not find anything on the forum about RV320 model and P2P. Thank you for your help Regards
Hi Folks, How does one undo a policy Deploy from the FMC to a sensor? For eg, if I have a scheduled deploy that pushes some firepower recommendations which causes an issue on the network, how can I rollback this deploy?
Resolved! Additional Logical Device on FPR4K
Hello, I have one multi-context asa running on the FPR4100. I would like to add one more logical device running asa in a single mode. So, I would have 2 ASAs running on the chassis. Does the FPR4K support it? Just for curiosity, can we have one FTD...
Resolved! VPN Decaps and Decrypts
Hi Everyone, Any idea what could be causing this? #pkts encaps: 1181, #pkts encrypt: 1181, #pkts digest: 1181 #pkts decaps: 1181, #pkts decrypt: 0, #pkts verify: 0 we usually encounter encaps/encrypts are incrementing, but no decaps/encrypt -- u...
Hi Guys, So I deployed my FTD as an IPS meaning I have only inline pairs and 1 mgmt interface. I tried to configure platform settings using FMC but I am a bit confused in some settings which required to include source interface for example SNMP. What...
Hello, Our ASA 5505 is nearly constantly logging the following event over and over again: <162>Sep 01 2018 19:36:55: %ASA-2-106016: Deny IP spoof from (xxx.xx.xx.104) to xxx.xx.xx.5 on interface outside In that event, the first IP address is the ...
Hi. Would you clear me on this, taken from the Cisco FTD 6.2.3 config guide (Network Discovery rules section, page 1971)? "If you want the rule to monitor managed device traffic, application logging is required. If you want the ruleto monitor user...
LS, my goal is to setup an ASA5506 (without Firepower, etc) to a predefined configuration. For this I use a configuration file which should replace the startup-config. To put the file on the system (including the firmware version 9.8.2) I use the...
Hi, I have cisco asa firewall. If my current connection reach 250k my network will go down. Any method to avoid this issue from happen? How to find the root cause?
The company I work in is based in western Norway and we are using a Cisco ASA5505 v11 with Cisco ASDM 7.1(2) as a VPN solution. It was originally setup in 2012, but the ASA Temporary Self Signed Certificate has expired last week and it seems no longe...
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/asa-fp-services/asa-with-firepower-services-local-management-configuration-guide-v623/Managing-Devices.html#33601 According to link above (section - "Applying Changes to Device Configurat...
are there any best practices for using the intrusion policy on the firepower appliance ? you have the "intrusion policy used before access control rule is determined" as well as intrusion policy that can be applied to a specific access control rule...
Hi friends. We want to register a FTD firewall in FMC 2500 using smart license. when I tried to use the token to register the FTD, I receive this error message. the FMC has the connectivity to the internet and receive the updates without any pro...
