I was interested in if anyone had a playbook they could share as it pertains to FirePower Managment center? If no playbooks can anyone share what their steps are as to:1. What you personally investigate first? Impact 1?, IOC, Malware alerts...2. What...
Forum Posts
Resolved! ASA 5512-X 9.3(3)2
On my Cisco ASA 5512-X, I recently upgraded to 9.3(3)2 to obtain TLS v1.2 functionality. However, when I go under the SSL options it only says TLS v1. I tested it and that the option TLS v1 means TLS v1.0, v1.1, and v1.2. Is there any way to only use...
Resolved! FireSight and Syslog
Probably over thinking this but when setting up syslog on Cisco FTD what's the source of the log messages? The FMC VM or the FTD appliance itself?
Hello. I have a customer with roughly 80 various types of partner site to site vpns with ACLs. Some of the VPNs use LDAP and some use radius to authenticate. The want to migrate from their production firewall to the colo firewall and hairpin all thei...
Hello, I have 3 SFR modules on monitor-only mode within a virtualized ASAs registered on a Cisco Firepower Management Center for VMWare 6.0.1 . I can see normal traffic statistics on the dashboard but even I tuned signatures to generate IPS alerts fo...
WE use the CISCO ASAV devices as well as Virtual CSR devices. These deploy with vmware hardware version 8 by default. I believe we have ASAv .9.8.2 currently. Can these be vmware hardware upgraded to version 10 0r 11 so they are current? Being tha...
Not sure why this firewall is hanging and working perfect after reload.. Pls is the detail and enclosed is the logs for your reference. ASA Version 8.2(5) Cisco Adaptive Security Appliance Software Version 8.2(5) Device Manager Version 6.4(5) do ...
Hi folks, Is there a way to update the timezone on the FTD? Currently FTD is managed by FMC 6.2.2 which has the update timezone(UTC+8). But from the device management, it shows the UTC timezone. See image below. I have check...
I have a IPsec tunnet to amazon VPC client.The tunnel is up and the VPC side can get access to my resources but I cannot get access to VPC side.The client claims that inbound security rules are setup to allow my subnet.How can I troubleshoot if my pa...
Hi can I get some help with this? Ive tried GNS3 with ASAv and packet tracer for this lab and I cant seemt to ping the outside interface of my ASA from a multilayer switch with inside vlans. below are a list of things i configured inside routes stat...
Hi all, I purchased a SSL cert from Godaddy for my ASA 5510. I followed these instructions:1. Generate a Certificate Signing Requestciscoasa(config)# crypto key generate rsa label my.godaddy.key modulus 2048ciscoasa(config)# crypto ca trustpoint my.g...
Currently I have a ASA 5506W that seems to have the Peer to Peer Blocking enabled. Need help in disabling the P2P Blocking. Has anyone used this ASA before and turned P2P off before.
Hello Team, Some users have problems connecting to anyconnect. Previously it worked for them, but since Windows was updated (The last December) it gives them error. >>> [Device Install (UpdateDriverForPlugAndPlayDevices) - VPNVA] ... !!! ndv: D...
Hi experts, how the high availability configuration between 2xasa with IPS modules? is it same as configuring normal 2xasa ?any special config needed? not sure yet how the 2 ips works after HA configuration. pls direct me to helpful docu . thanks i...
I am using the ASA 5505 (firmware version asa723-k8.bin) previously, the asa can make as dns forwarder by using configuration below. all the PC dns is point to default gateway. static (outside,inside) tcp interface domain 192.168.99.100 domain net...
