Hi Team, I have a partner who is asking me about the number of Active Directory domains supported on Firepower integration using User Agent and ISE.- Is there any limit of Active Directory domains using ISE integration with Firepower ?- What is the l...
Forum Posts
We have a customer that is using CX software on a HA pair of ASA 5512-X's. They want to upgrade to the FirePower IPS. There is an upgrade SKU (ASA5512-FP-UPG) that is an upgrade kit. Through CCW, when you customize the options on that SKU, you are di...
Resolved! Cisco 1910 Vlan
hi everybody i have a cisco router 1910 i need create a new vlan in that router, but it display that error when i create a new subinterface. % Configuring IP routing on a LAN subinterface is only allowed if thatsubinterface is already configured as...
I need to have IPS box and I am between having either 2110 or 7120? Please advise what is the difference between both? should I go for 2110 FTD with IPS image or this is considered NGFW and not a dedicated IPS box, Appreciate ur response ASAP
Resolved! ASDM access-list
Dears, I have been seeing the user option in ASDM gui as per the attached , how I can utilize that, for example it will act as a source and destination with a particular user grant him access or else block him, do we have any single sign on option ...
Hi. I'm in the midst of configuring Health Policy and Health Monitor Alerts. My FMC (v 6.2.3) is managing a 4110. I can see in the Health Modules table (https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-g...
Hey Guys, We have the following devices at our disposal: - 2x ASA5545 with FirePower. - 8x 3850 Catalyst Switches. The following scenario is desired: The ASA5545 need to be configured in a cluster mode, which we are struggling since all the e...
Hello all, We are looking to migrate clients from ASA5505s to something newer. We initially tried Cisco RV320/340 but this does not seem to be a stable platform and these firewalls have their share of issues and shortcomings. We are getting re...
Hi All, I want to download patch updated directly from cisco support site on our FMC. Our FMC is in management zone to which there is no interent connection but in order to achieve that i want to enable connection from FMC to internet. Would like t...
Hi, we made a URL filtering rule (to block some URL categories) and set HTTP response page. And it is working ok. But in order to show users a response page when they are blocked accessing HTTPS site, SSL decryption needs to be activated (so manual...
Resolved! SSD for ASA 5515X
hi all,we have an opportunity to sell cisco ASA 5515X firewall. and i have one doubt.do i need to order SSD drive with ASA 5515-X with IPS? Please note that i dont want to have CX software, i just want to enable the IPS software on the firewall.and i...
Resolved! Problem with ASA packet tracer
Hi everybody, i'm trying to config my ASA 5505. But it drop both icmp packets and telnet connection from allowed host, also after i've created an access-list... i post the asa running conf: names ! interface Ethernet0/0 switchport access vlan 2 ! ...
We are experiencing decryption issue with our two ASA 5555-x \Firepower appliances. We are receiving " ERR_SSL_Protocol_ERROR" when visiting sites. Restarting the browser temporarily resolves the issue, and disabling SSL decryption permanently reso...
Resolved! ASA FTD with FMC
Dear team, I'm currently setting up my data center with Cisco ASAs and am attempting to use the ASA running FTD and manage them via FMC. My first issue was with licensing. Since I'm using FMC after version 6, the license (classic) is no longer ac...
Resolved! bulk fetching access-rules?
Is it somehow possible (or what would be the best approach) to bulk-fetch multiple accessrules? When I do a GET request on /api/fmc_config/v1/domain/DOMAIN_UUID/policy/accesspolicies/CONTAINER_UUID/accessrules I get a list of all of the accessrules...
