Hello Any one,
Global Correlation health is not updated and its showing disable in our Cisco IPS manager , kindly guide how can updated.
Also Please confirm how to updated license in my IPS.
IGSBRDSBIIPS# sh statistics global-correlationNetwork...
Hey guys, here's a question.
Last year, we depolyed 2 ASAs, and they are configured as failover mode.
Use these commands:
failover interface ip lan_failover 192.168.1.1 255.255.255.0 standby 192.168.1.2 failover interface ip stateful_failover 192...
Hi,
I want to deploy Cisco Firepower NGFW for my customer. My question are
1. Does it important to enable https intercept, so the decrypted traffic can be inspected by IPS module ? I mean, does exploit code (to attack app vulnerabilities) probably se...
Hi, is it possible to change whitelist violation severity? I believe by default they are priority 1 events. I'd like to test whitelist violations without causing incident tickets which are generated on P1 events.
Hello,
I recently acquired 3 licenses (full TAMC) for a 5500-x device. ProtectControl/URLFilter/Malware
I generated the licenses for the License key displayed in ASDM ---> License key 77:xx:xx:xx:xx:xx.
I installed the Firepower module. I insta...
I have recently implemented ASA5585-X SFR SSP40 failover. Failover is up interfaces are monitored and configuration is replication and syncing from active to standby pair. Connectivity to core switch Cisco 6807-XL which is VSS pair is as following;
...
I have a Cisco Router configured with Nat Static translating internal network to another subnet to avoid subnet conflict
this is working fine, however internet browsing is not working with the overload statement. snapshot configuration as follows...
Hello I've created a diagram here to illustrate the problem. Just looking for some confirmation that this would be the correct fix for this. Our server inside Site3 cannot reach the internal Site2 network is the issue. Appreciate any help.
Diagra...
Decided to take the plunge and reimaged my 5506W-X to FTD versus ASA. I love NOT having to have Java on my PC in order to access a GUI. However, I do not like the firePOWER CLI. My impression is that you can see the config in ASA format but you ca...
Just looking for some advice on this issue we are having. We have an active/standby 5520 setup on our network. Our network is being monitored by a remote server via a VPN connection. The monitoring server can reach everything in our network except...
Hi All,
I am using ISE 2.1 along with Stealthwatch 6.7.1
I am working on configuring the ISE and Stealthwatch integration, referring the document, https://communities.cisco.com/community/technology/security/pa/ise/blog/2016/06/26/ise-21-and-stealthwa...
Hi,
I have one problem which I cannot bypass. Usually it works on physical interface out of the box, but this simply I cannot bypass. In short don't know how. I have configured one interface Gi1/8.10 VLAN 10 with IP 192.168.0.1 and management interf...
We have two ASA 5525 machines in a cluster. Do we need to purchase one or two Firepower services, since the secondary ASA comes only into play as a backup, that means, they are never active at the same time.
Dear Experts,
i am trying to connect to an FTP server which is placed at outside (internet) with a public IP. firewall is able to ping FTP public IP, but my system placed at inside interface of my firewall with gateway of inside ip of firewall unabl...
Hello,
I have simple scheme: Client --ASA--Server. Client is a POS-terminal.Server doesn't have SSL. Client has to work with SSL. Can I use "TLS Proxy" for this purpose?
