Hi Team,I´m working with some RFP questions. The customer has implemented Firepower 4140 and they was waiting hardware acceleration support to implement SSL policies.Now the customer launched a RFP to check if they configure SSL policies or work wit...
Forum Posts
Resolved! Firesight Schedule Deployment Issue
After the Firepower Management Center and the sensors were upgraded to 6.2.3, there is an increase of errors with scheduled deployments.As a workaround, we must do a "Force Deploy" on every sensor that has failed. Can anyone advise on this? ...
Resolved! Fix deny IP spoof from x.226 to y.233
Hi We have an ISP connection with 2 scopes x.224/30 and y.232/29 The /30 range is our public outside IP and the incoming /29 traffic is routed to x.226 by the ISP We have a server on one of the /29 IP's with public DNS assigned. When i try to acc...
Resolved! Question about ASA CPU usage
Hi My client is planing to extent their company size. They are using ASA5516 for firewall. And the CPU usage is 15%~20%. what I want to know is a limit CPU usage for stable operating of ASA5516. Thank you.
Resolved! Cisco FMC - CLI confiugration
Hi I am working with the FMC server but I feel the Web GUI is very much slow. Is there any way to work with the command line or text interface configuration like earlier we had Cisco IPS CLI configuration which made life easy. Please any working ...
Hi there, I got a Cisco ASA sitting between Cisco CUCM and SIP Service provider. There is 1-to-1 NATing between Intern IP address of the CUCM and a separate extern IP address. When a SIP call is initiated from inside to outside, the SIP Headers co...
Hello, we have two SMTP email gateways published on the internet, but we are getting a lot of alerts from Firepower about an invlaid FTP command going to these SMTP servers: [125:2:2] ftp_pp: Invalid FTP command [Impact: Potentially Vulnerable] F...
On FP 2110, Is there any support for SSH Management Access for FXOS on Data interfaces; when ASA is running in multiple context mode? The available configurations guides, among others (”Cisco ASA for Firepower 2100 Series” and ” Cisco ASA Series Ge...
I'm going some cleanup of our ASA firewall access rules and I want to delete the rules that have 0 hits. But I do not know how to check when the counters were last cleared on these rules. Please help!Thanks in advance!
Resolved! Adding HA Pair through FMC API
Hey everyone, I'm trying to add an HA Pair through the API but I'm getting an error. This is the JSON data I'm using in the POST body { "type": "DeviceHAPair", "name": "dd-suc-fw", "primary": { "id": "089a8d48-51ce-11e8-9738-817b58f3fa27", ...
Hi all,We have a pair of ASAs and the standby has to be replaced it, I have not found many documents about the replacement process so I have some questions:1- The failover configuration in the primary device is: failover failover lan unit pri...
Greetings Might not be the correct forum I'll give it a try. I've been running FTD in our Microsoft Azure IaaS for half a year and just noticed Azure must have upgraded the VM agent they use on the VMs, the FTD VM page is giving me a warning about it...
Hi! I'm currently configuring Remote Access-VPN for our network. I manage our firewall with FDM and I followed the configuration wizard and I can connect with anyconnect. The problem I'm having is that I need to restrict employees from our admin ne...
Resolved! I think ASA is blocking TACACS+ traffic
Resolved! Hi! Another Question with ASA5516
I have to redundant ISP at ASA5516. But I only have ASA5505 it is pretty difficult to configure with ASA5505 license.... In asdm os ASA5516, I will 0.0.0.0 0.0.0.0 x.x.x.x outside with metric 1 and 0.0.0.0 0.0.0.0 x.x.x.x(backupGW) with metric 100....
