Hi there,When FirePOWER is blocking SSL/TLS sites it would be preferable to see a response page, like with the HTTP pages.Is that possible? I guess it is with the enabling of SSL inspection?Any good guidance? Kind regardsThomas Winther
Forum Posts
Resolved! FirePower Linux Version
Hi folks, I want to update a host profile that is currently unknown to FMC. I'm yet to find out what flavour but it is not Ubuntu.The only option to for manual entry for linux is Ubuntu. Is it recommended to select this option? It would result in ign...
Hi all, I have an ASA 5505 in my lab where I am trying to enable an IP SLA WAN failover between the primary ISP interface which is a NAT'ed interface and a failover interface that connects to another router that performs the NAT. Can you take a loo...
Resolved! Firepower 2110 EtherChannel
I have ASA OS 9.8(2), FXOS 2.2(2.52) and I am trying to configure etherchannel based on the documentation https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/interface-echannel.html#ID-2077-0000001f Ho...
I'm looking for a best practices for deploying FireSight? Can someone help me? thanks-mikgruff
I will be setting up a VPN that requires static NAT for roughly 200 hosts, and each host must always use the same translated address. This is on an ASA 5525X running 9.6(4)3 My first thought is, for each host, create a network object with the local...
How to view & verify object-group Hi Anyone how a make the command show object-group network returns the name, and comments for the object group? like: #show object-group network | inc 10.80.30.46 RETURNS (SAMPLE): object-group network SERVERS #DNS...
Resolved! Going for ASA 9.6.4
hi, i have a mix of ASA 5500x with 9.1.x, 9.2.x, 9.4.x, 9.5.x that i needed to upgrade. looking at the software download, the TAC recommended codes are 9.4.4, 9.6.4, 9.8.2. my questions are: 1) in a nutshell (not referring to release notes), what are...
I have an ASA 5506 that is fully licensed (i.e. Control, Protect, URL and Malware).When using ASDM, there is a “FirePOWER Reporting” tab. But it has only displayed “No Data Available”. How is FirePOWER to be configured inorder for data to be availabl...
Resolved! Sub-interface Nat problem
Hi all, On Asa I have configured 2 internal sub-interfaces GigabitEthernet0/3.50 and GigabitEthernet0/3.70. Config on both interfaces : GigabitEthernet0/3.50 (vlan50-192.168.50.1/24) security-level is 80. GigabitEthernet0/3.50 (vlan70-192.168.70.1/2...
A costumer of mine would like to check the firepower managemnt center storage capacity fon connection event. How can I check the amount of event stored per day? He would like to store 1 years event logs complete with users activity. how can I check ...
Resolved! ASA /31 subnet mask
Does any one know the reasoning behind not allowing the ASA to accept the /31 range to be configured on the interface?
Resolved! ASA ACL drop all
Hello, I'm trying to configure the ACL on ASA 5505. I added some Permit Rule on outside interface (what I'm using for the test) but when I use the Packet Tracer on ASDM it say Dropped at "Global (implic rule)" It does: - ROUTE-LOOKUP: Ok - ACCESS-LIS...
Hi Gents,I'm facing a issue in my environment when I try execute a backup using FMC-virtual version 6.2.3. Looks like there is no resource enough. as you can see below:Does anyone might help me on this?------------------------------------------------...
Hi, recently we bought an ASA5508x FTD, and we are doing the first set-up, but the local web browser management is very limited in my opinion, shoud we need to purchase a license to be able to download the FMC?
