Hi all, i have just deployed a firepower in a vm environment, i have also just activated the smart license evaluation mode. i'm task to add a sensor on the firepower management center, where do i download the sensor for fmc in cisco support. my cu...
Unencrypted malware blocking is working fine. If you implement a SSL decryption policy for HTTPS web traffic and configure an ACP rule to inspect the HTTPS traffic for malware, one of two things will happen: 1. Either the Firepower module will de...
Hi guys, Does anyone know if it's possible to block using Firepower all browsers but one (let's say Chrome). So in terms of old firewall rules way: Rule no1 - allow browser Chrome Rule no2 - deny any other browser I found a hint (tracking User-...
Hi, Can someone tell me how to check or view temporary self signed certificate generated by ASA using CLI? Also, is temporary self signed certificate generated once command "http server enable" is entered? And, what happens if disable http server a...
Dears, Please find the attached Please suggest when 6509 are in VSS mode how the connection should be. The access switch is connected to both core with Multi chassis Ether channel, ,,, the user traffic is hash in default algorithm of the port cha...
Hi guys, i have two ASA 5540 firewalls working in stack, unfortunately one of them was broke up. some power issue or something like that... my question is, i have one ASA 5545X in spare. Can i substitute the 5540 for the 5545 with no problem? tha...
I am getting the log below: Deny udp src outside:192.168.20.11/21002 dst identity:239.224.20.7/1007 by access-group "outside_access_in" The systems (192.168.20.11) sits on the outside port of the firewall and does the streaming to 239.224.20.7/100...
Hi, I need to configure an Firepower 2110 so that it has two Ouside interfaces. Offcourse, I will put an Default Gateway route on interface Outside_1 and I wil have all my traffic go this direction. But I need e.g. that my second, Outside_2, interf...
I would like to configure a VPN between an FTD appliance and another Cisco appliance, specifically an ASA and an IOS router. Usually I use VTI tunnels so I can create a tunnel per-internet connection. I'm a bit unsure on the capability of FTD at the ...
Hi I recently started to receive this auth prompt in asdm for comodo ocsp url? I changed the anyconnect certificate about 2 weeks ago, and this is the third time I've gotten the prompt. Any help? Br, Michael
Helllo , We have 2 level of firewalls at my company. We have 1 DMZ sitting on the perimeter and a cisco firepower acting as internal/core firewall. We have an exchange server that should be publicly be accessible. Where do you recommend putting t...
Hi, Recently we have migrated to FTD 4100 from ASA 5585. Our system team runs scripts on the server using the putty session to the servers these scripts runs for hours .Earlier with 5585 these ssh sessions used to work properly but after migration ...
Dear Experts,we have an ASA 5585-X (Hardware: ASA5585-SSP-40, 12288 MB RAM, CPU Xeon 5500 series 2133 MHz, 2 CPUs) used as edge firewall to protect our datacenter.The firmware version is:Cisco Adaptive Security Appliance Software Version 9.4(4)5Devic...
Hi All, I'm trying to run some nmap scans to inside subnets over AnyConnect VPN, but the results are very incosistent. Meaning: sometimes even just a basic portscan will report 0 hosts as up. 5 seconds later the same scan shows the right hosts as u...
Hi people! I have an issue, while it shows that I am connected to a network and it's having internet.I can't open pages.I suspect it's a dns issue or a routing one.I paste you my config. asa5510(config)# show conf : Saved : Written by enable_15 a...
