I currently have a deny rule for one of my interfaces. When selecting this rule in the asdm and selecting logging the window pops up with the filter selected for this rule. The issue is that not all the deny hits are showing up in the logging window....
Forum Posts
Hi All I am having issues bringing up a vpn between an ASA and a Checkpoint firewall. I am using the normal settings that we use to connect on our others but this one fails to come up. I can see all the phase 1 proposals sent through, approx 10 sets,...
Resolved! Active directory Realm error in FMC log.
I'm getting the following errors in the FMC syslog. I'm not sure this is causing any issue as we are currently in the progress of standing up our firepower implementation and don't have any access policy using any user criteria yet. I just want to ...
Hi guys, I am planning to upgrade my FMC which is deployed in HA mode. Just thought because based on the process, I need to pause the sync of 2 FMC, do I need to upload the upgrade image to both FMC nodes or uploading in the Active FMC before pausing...
How much time does it take to update security patches and/or update the software for the FMC? Is there any other source of information from CISCO (https://tools.cisco.com/security/center/publicationListing.x) to verify the bugs or vulnerabilities rel...
Hi guys, I need your input about this design scenario. I want to break current 3850 stack into 2x 3850 separate units and add HSRP between them. On each ASA failover pair I will monitor interfaces connected to the HSRP switches. Routing wise I am u...
Hi everyone.I have a problem: 2 asa 5512-x in failover and dualwan mode. 5512 has 15 IPSec tunnels are configured with asa 5505 and 1 with routerboard(mikrotik) for testing. Software version on 5512x asa912-smp-k8.bin, and 5505 asa901-k8.bin. There i...
Are we going to provide the capability to limit users time to certain websites via a specified quota in future releases of the FMC/Firepower Appliances? Example: The Marketing Group can access Facebook for only 1 hour a day.
Hi; I deployed NXOSv ova image (nxosv-final.7.0.3.I7.2.ova) on ESXi 6.5 and decreased RAM from 8G to 5G and CPUs from 4 to 2. Then started VM but it stuck at the following page and doesn't do anything. Any idea? tnx.
Resolved! Categories and URL content list
Is there a place you can actually find out what URLs are contained within each category item? It would be nice to be able to look up to see what URLs a particularly category contains.
Hi Guys, Can we configure source routing from FDM ?
Respected All, As of Now "Dual AAA Authentication" no supported in FMC 6.2.3 for FTD 2100 Series. But we want that by Third Part Tools. Third Party asking us to integrate their RADIUS with Cisco FMC 6.2.3 (FTD2120). Post Integrating Authent...
Resolved! Site to Site VPN Issue
Hi Everyone, I am having trouble getting my Site 2 Site VPN working. It shows the tunnel is initiated on both sides, but I cannot ping across to any of the subnets. One is an ASA5510 (8.2) the other is an ASA5505 (8.2) I am sure I'm missing something...
Hello. If I reserve a FMC devnet sandbox environment, it comes with a virtual Firepower NGFW device, a Firepower Threat Defense Device, and a Firepower Management Center. However if I use the API explorer on the FMC in the devnet sandbox, a devices...
Hi All, I have a question around TFTP inspect. With firewall rule configured to allow connection from outside interface on port 69. When TFTP inspect is enabled on an ASA firewall, does this specifically only allow for file transfer from client to se...
