We are migrating from an ASA to Firepower and we're running into an error when configuring NAT. One of our networks is PATed out a secondary IP on the outside interface. That same secondary IP is also used for a couple of static NATs. On the ASA, ...
Forum Posts
Is it best practice to select all items from Attackers till Tor_exit_node within the Security Intelligence tab of FMC 6.2.0 to be added to blacklist for "all zones" or only to "outside" zone ?
Hi, I am installing AMP for endpoints in 90 servers. How can I estimate how much bandwidth will be consumed? Thanks!
Hi All, I have a 2120 running in FTD mode with the IPS and AMP licenses and an FMC all on version 6.2. I setup the IPS and AMP (file policy) based on the configuration guide. On my Access Control Policy I do have both the file policy and IDS check...
Hello,I'm working with one of my customers to fix an issue they are having with some new FTD devices they just brought online. They've found that syslog log messages are coming up with the wrong name from the new FMC FTD devices. When attempting to c...
If I create a hierarchical IPS policy set, for instance: IDS-ROOT w/ a base policy of Balanced Security and Connections IPS-ROOT w/ a base policy of IDS-ROOT and I run Firepower Recommendations on the IDS-ROOT policy, do they trickle down to the ...
Hello, I currently have the following configuration set on my ASA and would like to know if this is set up properly. I understand you can specify policy-map types and class map types but don't see/know how to apply these to an interface. Can I get ...
Hi, We have 2120 and 4110 series FTDs last month we upgraded 6.2.2-81 to 6.2.2.2-109. Prior to this I check Cisco recommended upgrade path was 6.2.2 > 6.2.2.x After upgrading a pair of FTD 4110 in HA, the primary device now shows a "failed" state...
Hello, We've started using Azure and have a few subnets and VMs in there and I've been asked to size and cost the Cisco ASAv but don't know where to start. The Azure Marketplace does offer to much help either. Has anyone done this before? Thanks
Hello I have installed FMC and I need to see which ports / IP are being blocked / allowed. I dont know where I can find this setting. I know in ASDM you had a realtime viewer that showed what was blocked from what IP etc. I think it might be un...
Hello, A client recently purchased a Firepower 2110 to replace an ASA5525-X w/ Sourcefire at one of their locations due to a circuit upgrade and need for more aggregate throughput. They currently utilize Sourcefire for Malware, Intrusion, Geolocati...
Dear Team, I need to know below the following feature can support on ASA5525X Firepower appliance? Mainly User-based bandwidth Management. Threats Protection Bandwidth Management user based VLAN Malware remediation Weekly Report generator Cont...
Resolved! Migration from ASA 5520 to 5516-X
Hey guys, for a customer, I'm asked to plan a migration from two existing Cisco ASA 5520 cluster to a new model (but still 2 clusters). Currently, I'm thinking about the Cisco ASA 5516-X which will be sufficient for the next 5 years (and plus) base...
Hi Guys! I need clarification about these 3 devices (ASA5506-X w/ FP, ASA5506-K9, ASA5506-FPWR-BUN). Are these 3 difference devices and function or just "nick name" ? What specialty from each devices ? Thank you in advance
Hello All, Can we have FireSIGHT user agent high availability solution. i.e active and standby user agent on different machine. Thank you
