We are facing issue with intrusion policy that is not working as per the configuration. We have a intrusion policy in which multiple signature state are"Drop and Generate Events" and our base policy is "Balanced security and Connectivity". The the in...
To my knowledge Firepower does not use Telnet. When creating a session to the sfr module and running a netstat -an I see the sensor listening on port 23 sfr$ netstat -an tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN Can anyone tell me why this sensor is ...
Hi Guys, we are going to add 1000 Network object to ASA5516 with Firepower on 6.2.I would like to know is this possible? or are there any information about network objects limitation? much appreciate. rgds,Cuong.
I can ping the host that is on the other side of the ipsec tunnel but i cannot monitor it via SLA. PCVST-ASA# ping inside 172.31.56.152Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 172.31.56.152, timeout is 2 seconds:!!!!!Success ...
I have a IPsec tunnet to amazon VPC client. The tunnel is up and the VPC side can get access to my resources but I cannot get access to VPC side. The client claims that inbound security rules are setup to allow my subnet. How can I troubleshoot if my...
i deployed FMC version 6.2.2 which managing FTD appliance , i am trying to generate report for specific rule with its connection events for last 3 days in excel format but after generating report it give me on the last two hours , i tried to exceed ...
Hello, I'm working on Lab and I want to integrate FirePOWER with Active directory, I followed the steps on this guide: https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-firepower-services/200566-Configure-Active-Directory-Integration...
Does anyone have the download link for Packet Tracer that comes with an ASA firewall or at FW image I can upload to my version which is 6.0.1.001?
Hi I would like to know what configurations that we can do on FTD CLI ? I believe Management interface IP address and FMC address for managing FTD can be configurable. Other than these, can we configure configurations like HA and Code installation an...
Hi When I have boot system disk0:/asa961-lfbff-k8.SPA on ASA5506 and setup: access-list ERTHER ethertype deny bpdu access-group ERTHER in interface outside access-group ERTHER in interface inside my ASA do not populate Spanning Tree Protocol to th...
Connection to service.brightcloud.com and database.brightcloud.com with telnet works finde.But a database download should not work. SF-IMS[4407]: [4432] CloudAgent:CloudAgent [WARN] DownloadURLDBFilesOnDC: URL Database update: Malformed message rec...
Hi All i have ASA 5525 connected to DMZ server cisco2960 and core switch 4500 series(VSS configured on it) and i connected asa5525 with the core switch using port channel and i want the dmz network to access the internal core side network and vice ve...
Hi, I've ASA5585-SSP-40 appliance i want to know that can we manage ASA Firepower (ASA5585-SSP-SFR40) by using ASDM?, or we compulsory require Firesight management center? I could see in cisco web side that we can manage Firepower with ASDM if we...
Hello everybody. I have a problem logging into firepower web panel as admin. It bans (?) me after 2-3 minutes of activity. Nothing in logs, just drops my connection to its panel. Host is reachable, can ping it. Added my ip to whitelist, it didnt help...
Hi all, I've got two Cisco ASA 5510, where there is on primary and another one as Standby failover. They both have a public IP address. Primary: 201.201.201.201 Standby: 203.203.203.203 PRIMARY ASA: Failover On Failover unit Secondary Failover ...
