The issue was that I didn't realize that I accidentally created the service with a source and destination port. The source port is randomly generated along a range of ports so, by designating a source port, I accidentally caused the access rule not t...
Hey everyone, I have a brand new FMC HA setup with two FTD's assigned. The FMC pair is running 6.2.3.1 and I'm now trying to put the patch on the FTD firewalls as well. When I try to upgrade I get an error. This is the log output: admin@dd-suc-fw01-s...
Hi all, I am not sure if this has been discussed or not. I am looking for recommendations on how to move some new Firepower service modules, which run on various ASA 5500-X's and performing only monitoring, from their currently registered virtual ...
Hi, I have a Firepower 2110 device with ASA OS 9.8(2) and FXOS 2.2(2.52). The datasheet says that this device has 12 Ethernet ports and 4 1G SFP maximum and I want to know which ports are Ethernet and which are SFP. When I do show interface it gives ...
Hello, My name is SebastienMy english is not perfect, i'm not natif of this language so i going to do my best. I received my Cisco ASA 5505. My knowledges in network Cisco and in general is very low so i have lot of questions, but for this time b...
Hi there,When FirePOWER is blocking SSL/TLS sites it would be preferable to see a response page, like with the HTTP pages.Is that possible? I guess it is with the enabling of SSL inspection?Any good guidance? Kind regardsThomas Winther
Hi folks, I want to update a host profile that is currently unknown to FMC. I'm yet to find out what flavour but it is not Ubuntu.The only option to for manual entry for linux is Ubuntu. Is it recommended to select this option? It would result in ign...
Hi all, I have an ASA 5505 in my lab where I am trying to enable an IP SLA WAN failover between the primary ISP interface which is a NAT'ed interface and a failover interface that connects to another router that performs the NAT. Can you take a loo...
I have ASA OS 9.8(2), FXOS 2.2(2.52) and I am trying to configure etherchannel based on the documentation https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/interface-echannel.html#ID-2077-0000001f Ho...
I'm looking for a best practices for deploying FireSight? Can someone help me? thanks-mikgruff
I will be setting up a VPN that requires static NAT for roughly 200 hosts, and each host must always use the same translated address. This is on an ASA 5525X running 9.6(4)3 My first thought is, for each host, create a network object with the local...
How to view & verify object-group Hi Anyone how a make the command show object-group network returns the name, and comments for the object group? like: #show object-group network | inc 10.80.30.46 RETURNS (SAMPLE): object-group network SE...
hi, i have a mix of ASA 5500x with 9.1.x, 9.2.x, 9.4.x, 9.5.x that i needed to upgrade. looking at the software download, the TAC recommended codes are 9.4.4, 9.6.4, 9.8.2. my questions are: 1) in a nutshell (not referring to release notes), what are...
I have an ASA 5506 that is fully licensed (i.e. Control, Protect, URL and Malware).When using ASDM, there is a “FirePOWER Reporting” tab. But it has only displayed “No Data Available”. How is FirePOWER to be configured inorder for data to be availabl...
Hi all, On Asa I have configured 2 internal sub-interfaces GigabitEthernet0/3.50 and GigabitEthernet0/3.70. Config on both interfaces : GigabitEthernet0/3.50 (vlan50-192.168.50.1/24) security-level is 80. GigabitEthernet0/3.50 (vlan70-192.168.70.1/...
