Hello, If you look at the below policy inspection by Firepower, You have allow and block permits, etc...Let's say, Rule number 3 also says block country South Korea from any source to any destination and under rule 2, I am allowing access to samsung....
Dears, I Have 3 question here please answer I have a perimeter firewall which is connecting to the internet ,DR and extranets, I have a switches in DR & some switches kept in other company premises (extranets) which are routing through firewall is...
Hi, I'm currently studying routing on the CISCO ASA, and now currently we have a configuration: Now, from checking the config. I have found that the default static route will all go to ISP1 with an SLA option of switching to ISP 2 whenever ISP1...
Recently we had a problem with our asa 5580-20. To resolve the motherboard was replaced. The device seems to be working again but when I boot up I get stuck at the activation key. Enter Activation Key Part 1 of 5: Part 2 of 5: Part 3 of 5:...
Hello all We are in the middle of deploying an FTD with IPS for a project. We have seen a large number of the following violations in the IPS event log: Message Priority Classification PROTOCOL-DNS dns response for rfc1918 172.16/12 address detec...
I want configure ASA, so it requires local username and password for enable mode. Command: aaa authentication enable console LOCAL When I configure this command, I am not able to login even though the following configuration already exists: username ...
I'm literally beating my head into a wall trying to figure what I'm missing here. User can terminate anyconnect client just fine,but cannot pass traffic through to the internal network. Very basic setup. 74.x.x.x static IP on outside interface. ...
Hey, we have a server that has an outside IP and an inside IP. It's inside ip is 192.168.222.30/24 and it's outside IP is199.204.50.2/29. The connection to this server from the outside is perfectly fine, but access from inside users to theNAT'd IP wh...
Hi. Please, can you tell me if FirePower 2100 series support 3DES/AES?. Which lincense is necessary?. The FirePower 2100 series will use for firewall, vpn site-to-site, anyconnect vpn and IPS subscription (threat). For apex anyconnect, the re...
Hi, Is there any limitation in deploying HA or Clustering between two FPRs that are located in two datacenters 10km (optical cable distance) apart? Is there something that is not considered good practice in such a deployment? The services running beh...
I have six ASA's in my Firepower management center. Two of the six have a URL filter license that will expire in less than 90 days. How can I tell which two devices are about to expire? Thanks
Hello, I have a pair of ASA 5515-X's, and I'm trying to automate the backup command using EEM. event manager applet backup description Backup the VPN config daily event timer absolute time 01:00:00 action 0 cli command "copy /noconfirm running-conf...
We are trying to add some ASA to CSM and tried CSM 4.15 and 4.16 and get the same error when trying to add the devices Message : Invalid device type or versionSeverity : ErrorDescription : Invalid device: The device combination of version "9.8(2)8 ...
What are the 80 categories to ASA with FIREPOWER URL FIltering, like gaming, sport, etc....
Having 12.4 version IOS in Cisco 7206 router, how to disable SSH Server CBC Mode Ciphers, SSH Weak MAC Algorithms
