Is it possible to change an ISAKMP VPN port just for one peer? Say if we want to change this to be tcp port 45500, the command for this would be: Looks like the command to change this is "isakmp ipsec-over-tcp port 45500" but this is enabled glob...
The Manual Deployment of firepower recommendations persistently is timing out. I have attempted to push out the recommendations after generating them to no avail. the system will appear that it is deploying them to the devices, but after about 20 min...
We are replacing memory in one of our FS3500 with 48GB, the old 12 GB RAM is removed. It seems a waste not to use that memory. We have an old DC3500 (without servicecontract) with 12GB installed and empty memory slots. Can I add the 12 GB memory to...
Hello, I just upgraded my FMCs to v.6.2.2.1 and I'm trying to work making our block IP automation a little cleaner. My initial plan was to put them in a security intel feed and have it update on a 5 min interval but unfortunately custom feeds can o...
HiI am currently facing issues with the DHCPRELAY Agent on the Cisco ASA (5555-X ,ASA 9.6) . We have the following deployment.Cisco AP -> Cat 3K -> Cat 6K -> ASA -> Windows DHCP ServerThe APs are not able to get DHCP and from the ASA I can only see D...
Created a CSR, obtained the certificate files, uploaded them to ASA505. Three certs in the CA Certificates; one in the Identify Certificate. All seems just wonderful. Now to make use of the SSL certs: when trying to associate the certificate to t...
I'm in process of learning and implementing the user agent solution for AD dealing with Firepower Identity management. Reading in the directions, the user agent can handle 5 Domain Controllers. My environment has no less than 8 DC's. Will I have t...
HI I have the below proposal for new setup and I need design advice Network devices: : 3- Internet service providers’ for 3 different networks(not for High-Availability only for three different service (Separated) . 3-Cisco 800 Series router for inte...
I've created a new realm in the FMC 6.2.2.1 and input all of the required information. In the user download section, I'm able to see all of the Available Groups in our domain. However, the automated downloads are failing every day -- "unable to downl...
Hello, I'm new in the community of packet tracer. I am trying to create a VPN between 2 Cisco ASA 5505 (Site to site) via packet tracer. I would like my PC from my Site 1 (192.168.1.1) to ping my 2nd PC from my Site 2 (192.168.2.1) Unfortunately if I...
We are going to upgrade our firepower platform. We have cluster FMC4000 (Active/Passive), and two sensors (FP4140). These are the current versions:FMC4000FTD version: 6.2.0.2FP4140:Firmware 1.0.10FTD version: 6.2.0.2FXOS version: 2.1.1.77-----------...
Hi, I have been assigned to install and configure Cisco Firepower 2130 Appliance. but I am not getting where to start as I am not getting relevant documentation. Please clarify below points: 1. Cisco Firepower 2130 master bundle 2. Cisco Fire...
I am currently working on a project to install new IPS module on existing standalone 5515-x ASAs. The ASAs are on the 9.2(4) 20 version. Based on the ASA Firepower compatibility matrix, there seems to be a bug issue (CSCuv91730) with this version d...
I'd like to restrict incoming L2L traffic to just my list of allowed peers. What's the best way of accomplishing this?
When I do a wireshark capture on a switchport, I see my client's SYN go out and the SYN ACK come back within the same second. However, on the FWSM module sitting on the same switch, the SYN ACK doesn't arrive until after 30 sec and so it gets dropped...
