With forward secrecy in TLS 1.3, how is the FMC/FTD going to handle TLS 1.3 specifically with URL filtering? This is just around the corner, so I was wondering if there were any work-arounds as the FTD will not be able to pull the certificate from t...
Hi people! Has somebody information about the performace of the NGIPSv under VMWARE??? What are the sizing guidelines?Thanks!
Hi, I have two ASA 5508-X, I configure BVI interface on each ASA and assign port 6,7,8 to that BVI. Can I configure OSPF to form neighbor between these 2 ASA via this BVI interface?
Hi, I re-imaged our Firepower from FTD to ASA successfully. What is the command to configure the firepower to point to the firesight management center so it can be managed. I can use the connect asa command to access the ASA, but not quite sure how...
Hi Guys, I am facing of my ASA 5506-X firepower was not working , had try to follow cisco datasheet setup accordingly but problem still persists. Please help... Card Type: FirePOWER Services Software ModuleModel: ASA5506Hardware version: N/ASe...
Greetings, I found a post that talked about using the host input API (https://www.cisco.com/c/en/us/td/docs/security/firepower/60/api/host-input/HostInputAPIGuide.html) but has anyone actually used this and can share the format of the input file(ap...
Dear all, I have virtual fmc with 2120 ftd ver 6.2.3 with maleware and thread license. I want to configure ssl any connect remote access vpn to have 50 users concurrent users. Do o have to purchase AnyConnect Apex license??? taking into consideration...
I am looking at the ASA syslog for my website IP. I found lots of logs like this happened at exact same time and second and date (for different port, eg. 33670, 336578), appeared 31x and then 2 mins later, appear 31x again. %ASA-4-434002: SFR requ...
Hi, I'm looking at purchasing dual 2110 to run in HA mode to replace two Cisco ASA 5510's in HA. Is there any additional licenses needed to run the 2110's in ASA mode? I assume that depending on the version of version of code I'm running on the A...
I need to create a rule to allow IPsec/ISAKMP traffic trough a FTD 2100. The rule for the ISAKMP is pretty straight forward, allow udp 500 and/or 4500. But how do you define the rule to allow protocol esp?
I have an interesting request from a remote-site not wanting to allow access to a public facing IP. We have a tunnel between their ASA & ours which hairpins traffic to 2 networks out the outside interface. (IPs have been changed to protect the innoc...
Hi, Is it possible to configure changes in the ASA CLI of the ASA-FTD? Thanks
Hello, I have a permit statement in my ACL - Access_in_2 permit tcp host X.X.X.1 host X.X.X.2 eq 1068 but I am getting the following denied statement, Access_in_2 denied TCP Int_1/X.1(1068) -> Int_2/X.2(63055). I am not sure why it is getting b...
The company I work for has a branch office in Phoenix and they just had their dvr security systems installed with 12 new cameras and they want to use the speco player app to view when offsite. They have app set for 2 Devices. The first device is name...
Hello Guys, For some time I´ve been having problems with my AD user for Firepower user agent. I have Cisco Firepower User Agent for Active Directory running as a service logged On as the username I have assigned for Firepower and its running but...
