On one of our sites, we have a Firepower 2110 configured for WCCP. Previously, it's WCCP Router ID was an unused ethernet port that was configured with an IP address, but not physically connected to anything. It was this way, when I inherited, so I...
Forum Posts
Hi All, Wondering if I could get your take on something and if I've got a misconfiguration in the deployment somewhere? We have some FTD's managed by FMC.We have live VPN tunnels and we've been using the mandatory ACP area to define the access rules ...
Good afternoon, We are planning to move a FMC pair which are hosted across two datacentres, to two new datacentres. We have to change the IP address of the FMCs which manage a number of FTD pairs. My plan is: From the primary FMC (FMC1) GUI go to S...
I am trying to upgrade the firmware on ASA's we have at multiple sites but for some reason copying over the firmware fails. We are currently running FP2140's in ASA mode and whenever I copy the files over from a windows machine, it fails. I am using ...
Is there any security benefit by putting in specific deny's for say known bad hostsin a firewall rule base when the rule base has an implicit deny all in it?
HejI have enabled the interface on FMC and saved the configBut if I check the CLI on the fw, it still looks shutdown. Am I missing something?> show running-config interface Ethernet 1/12!interface Ethernet1/12shutdownno nameifno security-levelno ip a...
Hi there,Does allocating an IP to diagnostic interface would cause traffic to the firewall drop completely?Just learnt this by the hard way. Diagnostic interface is enabled by default so I just added an IP, same range as the management interface as i...
Hi everyone, I'm setting up a Firepower (FDM on box) running version 7 as part of a lab environment to prepare for some network changes in our production environment to try to avoid getting stuck late during implementation. I was trying to create a s...
Resolved! Network security presentation topics?
Hi everyone,I’m a new cybersecurity analyst, and I’ve been tasked with creating a presentation on network security. The main focus is on configuration, setup, best practices, or technologies expected to emerge in 2024. relevant topics in CCNA may als...
We launched Cisco ASA instance from AWS marketplace asav9-14-1-10-ENA-87868dac-850c-4c36-ba33-ff3d39a724ac-ami-0c0a65e104f6b08a8.4 (ami-0ad85ff80bee59491)https://aws.amazon.com/marketplace/pp/B00WH2LGM0?ref=cns_srchrowOur users are using it for devel...
Hi team,FMCv 7.4.1 and FPR2140 running 7.2.7 We are seeing an issue with BGP failing on FTD 2140 with AWS.Not established exactly when this has started, potentially since when we upgraded the FTD about 9 days ago.Only one of the peers is down and ot...
Is it possible to configure any type of email alert from a FTD 4145 to notify if the BGP peer link goes down? Thx in advance.
I saw routers and firewalll having options to block cookie and java.But is blocking java equal blocking javascript?bank web using javascript and cookie.but these options exist, which kind of situation that will use these option and still can use inte...
I am using Prometheus SNMP to get info from my Cisco ASA 5585 clusters. However, I was unable to find any MIB/OID containing information about last failover - neither time nor a reason. Pretty simple information that exists in CLI. Could someone, ple...
