Hi Community,I have FMC with L7 IPS license outdated, so I could not deploy my rules down to my FPR,I've been told I could deploy rules by closing all L4-L7 functions.Where could I check if all of L4-L7 functions was close?BTW, I've found a settings ...
Forum Posts
I have an architecture with two 3110 chassis, each with 3 instances. These instances are in active/standby HA, and when I have all three instances on the same chassis, the memory of Snort 3 increases, and we start having issues with the applications....
HiI have a 2 ASA 5555X and firepower module run on this ASA, and manage through FMC.I want to change the IP modules and FMC, but I realized it's a risk.Please give me the best solution to change the IP.
Hi Team, We are currently encountering an unusual issue within our network. According to the traces conducted at the servers, it appears that the TCP RESET packet sent by the Source Server is not being received by the Destination Server. It is not...
Resolved! Default action to FTD
Hi to everybody,It is not so clear to me what the discovery default action does. I am asking this because my last rule is deny from outside to inside. Therefore i suppose that the FTD does not pass to the default action that is below the all deny rul...
Hello Community,I am currently facing an issue with my FMC, where my L7 IPS license has expired, preventing me from deploying my rules to the FPR. I’ve heard that I could potentially deploy the rules by disabling all L4-L7 functions.Where can I check...
Hi all,I have LDAP and Radius external authentication methods setup for some admin-user to login in my FMC. I can see these users are visible in system > user list but just as external, there is no detail about what authentication method used for the...
We would like to know weather Cisco Firepower IPS & Broadcom ATP CAS uses Oracle Java SDK or JRE or not? If yes, Does ArcSight bundle the Java license together? (does it come bundle with the product or require any additional license) As far as I unde...
Hi All, FMC model hardware1700 management port eth0, 1 and 2 are Rj45 port of supported bandwidth 1G or SFP type ?
FMC started throwing Health Alert: URL Filtering registration token expires in XX days, where XX is reducing day by day. Classic licensing. ASA with Firepower module, 6.6.7.1. Could disable health monitoring for this feature, but would like to under...
Hi Community, I have configured a syslog server for Audit Logs on my FMC with TLS enabled. The FMC is sending messages on TCP 6514 but the syslog server is only accepting TCP 9140. Is it possible to change the Port on FMC? Syslog for the FTDs is work...
On CLI I can't connect to asa. . firepower-2110# connect asa Lina has not yet started. Please try again later.firepower-2110# show version Boot Loader version: 1.0.12System version: 2.2(2.119)Service Manager version: 2.2(2.119)firepower-2110#
I have a 5515-x firewall that use to allow ASDM connections without issue. Now out of nowhere the ASDM image has decided to remove itself and not allow itself to be added back. I have done the following hq-fw# show asdm imageDevice Manager image fil...
We are looking to deploying FMCv in Azure to manage 2 FTDs (using the 2-Device License). If in the future we install additional FTDs, I know we'll have to purchase the 10 or 25 Device licenses. My question is I’m being told that if we go with the 2-D...
We upgraded our 4110 FTD from version 7.2.4 to 7.2.5 successfully, However, a couple of hours after the upgrade, we created a new access policy and attempted to deploy it. It took about 10 minutes but unfortunately failed. When we tried to deploy aga...
