Network Security

Resolved! ASA 5512-x with firepower IPS is not working .

Hi Expert i have one asa 5512x with firepower managed by firepower management center and i have L-ASA5512-TA SEULA . but there is no PAK with that . FMS show me Protection license is required when i add access control policy on this ASA 5512 . How ...

Resolved! ASA 7.2(4) NAT policy to ASA 9.2(2)4

HI Experts, I have a NAT policy that I need to migrate from ASA 72.2(4) to ASA 9.2(2)4 My current NAT policy is on 7.2 code is sh run access-list policy_nat_1 access-list policy_nat_1 extended permit ip host priv-ip object-group obj-group static (ins...

TCP Reset issue, possibly with ASA

Community, I am experiencing a strange issue that I will do my best to explain. Our company is moving to using Mailgun as our email relay provider. Mailgun has given us a FQDN of api.mailgun.net to send the emails to. This FQDN has a "revolving" DNS ...

Resolved! Configure Console (ILO)

Can somebody please help on the commands to configure console (ilo) IP on Firepower sensor with OS 5.4 version?

4100/9300 Visio Stencils?

Hello - I'm currently looking for any visio stencils available for the 4100 and 9300 series devices. Does anyone know where I could find them?! Thank you!-Chris

Required Cisco Firepopwer Manager 1000 Configuration Guide

Hello All, Today I have received one Cisco Firepower manager 1000 in my organization, anyone please guide me how to first level configuration can I do ? And how to connect in our exiting topology , please share topology ? Regards, Sohel

Snort Engine Upgrade

I see sourcefire snort engine upgrades on cisco.com. But I don't see it in my VDC. Does I need to upgrade it and how?

Resolved! FMC behind un-configured FTD 6.2 appliance

Good Evening! I have a virtual 6.2 FMC appliance that I'm building out, and it sits behind an un-configured 5506-X FTD appliance. From everything I'm seeing, you have to use smart licensing - which requires access to Cisco's licensing servers. That'...

Resolved! Nat from Public IP to Internal Server using Custom TCP Port

Hi, I need some Advice to Configure ASA Firewall (ver 8.2), I'm really new to ASA, (Done switching so far.. so this is my first task with ASA). My task is simple I have as ASA Firewall which has a public IP Address to Publish some Services. My task...

NAT to the same IP address on two networks

I'm trying to get the following system setup - I want a client to get to two different network each has a server with the same IP address I have an ASA 5520 - ver 9.1(1) I can get one working - for example The commands for one NAT translation are a...

FTD HA on FP4100

Dear All I have a couple of questions about HA setup: 1) When applying VDB updates, how the transit traffic is impacted for cluster or active/standby scenarios during Snort restart? (FP4100 is running in FTD routed mode) 2) Which mode cluster or ac...

Trying to get an external IP mapped to internal server in DMZ? (ASA 5506)

So, I've got a DMZ interface configured, and I've got a host inside it, I'll call it Webserver1. I've got most of it working, however I cannot get the external IP address to map correctly to Webserver1, pinging it gives me nothing and of course I ca...

Resolved! Trust host in Sourcefire IPS

We have deployed sourcefire 7125 with defence center 1500 recently. We get alot of alert through email about 10.1.1.10 with port 445, 10.1.1.10 is our share file server so that is normal to open that port in the server. How could we classify that 10....

Resolved! How to download Cisco Next Generation Firewall Virtual Appliance OVF for ESX

I need Cisco_Firepower_Threat_Defense_Virtual-ESXi-X.X.X-xxx.ovf. Where i can i download it from. I tried following link but it is script file. https://software.cisco.com/download/release.html?mdfid=286306503&flowid=79503&softwareid=286306337&releas...