Maybe my search fu is weak and I could not find it but I have scoured the documentation for security manager and the install guide (latest version included) appears to have as one of its steps to login with an account that has administrative privileg...
Forum Posts
I have two 5525-Xs in active/passive failover. I'm running 9.6(2) at my primary site (I'm upgrading in the next couple days because of cisco-sa-20180129-asa1) and would like to upgrade the Sourcefire modules to make sure I won't have any compatibilit...
We are going to be moving our FMC FS4000 appliance to a new data center in the near future. Does anyone here have any experience with moving their FMC like this? I know that the IP and name changes will require us to reconnect all SFR modules, bu...
Resolved! Cisco Firepower policy question
Hello, If you look at the below policy inspection by Firepower, You have allow and block permits, etc...Let's say, Rule number 3 also says block country South Korea from any source to any destination and under rule 2, I am allowing access to samsung....
Resolved! snmp & ntp
Dears, I Have 3 question here please answer I have a perimeter firewall which is connecting to the internet ,DR and extranets, I have a switches in DR & some switches kept in other company premises (extranets) which are routing through firewall is...
Resolved! CISCO ASA 5525 force route to backup ISP
Hi, I'm currently studying routing on the CISCO ASA, and now currently we have a configuration: Now, from checking the config. I have found that the default static route will all go to ISP1 with an SLA option of switching to ISP 2 whenever ISP...
Recently we had a problem with our asa 5580-20. To resolve the motherboard was replaced. The device seems to be working again but when I boot up I get stuck at the activation key. Enter Activation Key Part 1 of 5: Part 2 of 5: Part 3 of 5:...
Hello all We are in the middle of deploying an FTD with IPS for a project. We have seen a large number of the following violations in the IPS event log: Message Priority Classification PROTOCOL-DNS dns response for rfc1918 172.16/12 a...
I want configure ASA, so it requires local username and password for enable mode. Command: aaa authentication enable console LOCAL When I configure this command, I am not able to login even though the following configuration already exists: username ...
I'm literally beating my head into a wall trying to figure what I'm missing here. User can terminate anyconnect client just fine,but cannot pass traffic through to the internal network. Very basic setup. 74.x.x.x static IP on outside interface. ...
Hey, we have a server that has an outside IP and an inside IP. It's inside ip is 192.168.222.30/24 and it's outside IP is199.204.50.2/29. The connection to this server from the outside is perfectly fine, but access from inside users to theNAT'd IP wh...
Resolved! FirePower 2100 series con FTD
Hi. Please, can you tell me if FirePower 2100 series support 3DES/AES?. Which lincense is necessary?. The FirePower 2100 series will use for firewall, vpn site-to-site, anyconnect vpn and IPS subscription (threat). For apex anyconnect, the re...
Hi, Is there any limitation in deploying HA or Clustering between two FPRs that are located in two datacenters 10km (optical cable distance) apart? Is there something that is not considered good practice in such a deployment? The services running beh...
I have six ASA's in my Firepower management center. Two of the six have a URL filter license that will expire in less than 90 days. How can I tell which two devices are about to expire? Thanks
Hello, I have a pair of ASA 5515-X's, and I'm trying to automate the backup command using EEM. event manager applet backup description Backup the VPN config daily event timer absolute time 01:00:00 action 0 cli command "copy /noconfirm running-c...
