I am wondering how ASA/Firepower handles empty object groups in a rule. For example, I have a rule with an object group for destination; all working fine. I then have to make changes to the object group, and it turns out all IPs get removed from th...
Forum Posts
Hi! We have an ASA with 2 ISP's and sla monitor configured. And it works great if the first channel fully fails.But in the case of packet loss on the first channel, we are getting the channel flapping. sla monitor 1type echo protocol ipIcmpEcho 8.8.8...
Hello All, We are using a FMC with 2 FTDs.we are trying to configure the FTDs to send SNMP traps to an SNMP Server using the Platform Policy in FMC.It does not look like we are receiving SNMPV3 traps messages on the SNMP server after events like rebo...
We are using a FMC with 2 FTDs.we are trying to configure the FTDs to send system messages to an external Syslog using the Platform Policy in FMC.It does not look like we are receiving Event messages on the Syslog server after events like rebooting t...
hi Friends,We ahave ASA 5510 and 5520 @ our office. We are not using any netflow tools in order to get the talk talklers.As this firewalls are shared firewall (used by different Projects), we are not able to get , which project is using more traffic ...
I'm using sla monitor to monitor 2 interfaces on a failover pair of 5525s. Here are the sla mon config lines: sla monitor 10 type echo protocol ipIcmpEcho 25.25.25.154 interface outside (This IP is reachable by both interfaces and is not the gw to e...
Hi All, Need help. I have my ASA5525 ver 9.8. configured for dual ISP. ISP1 where all traffic goes through except URL abc.com that is supposedly bound for ISP2. thank you in advance
Resolved! Firepower Rule 1:39725:3 false positive?
Hello, for a couple of weeks we see in our firepower system a great amount of Server-Webapp Drupal restws page callback command injection attempts. Firepower shows us the clients and said the issue came from the AviraUpdate Client. But why should the...
Hello freinds pls see attachment , i m getting "cannot allocate memory " when i copy asdm from tftp thanks ibrahim
Hi, I have Cisco ASA 5585-X with description on the below: Mod Card Type Model Serial No. --- -------------------------------------------- ------------------ ----------- 0 ASA 5585-X Security Serv...
Hi, As per the documentation FireAMP blocks malware based on known hash and Firepower and can hold the file for 30 secs to get the verdict. In case if the verdict is unknown by FireAMP then can we use the ClamAV engine which is part of local malware ...
Hi Experts, 1. Does firewall inspect UDP traffic like TCP, do I have to allow return traffic for UDP. 2. for e.g: I have a rule which says traffic that's being sourced from inside (10.10.10.10 ) going to outside (20.20.20.20) on UDP port 33000 i...
I have run into an issue where redundant devices devices behind an ASA that are using it as a default GW are having problems at failover when there is a MAC change on a VIP. The cisco CSS utilizes gratuitous ARPs on failover, and until the arp cache ...
Gents, I would like to know your opinion on the below design to protect the servers of critical business applications from the operational staff. I made my ASA the Gateway for the critical business applications' servers. Means any user accessing ...
Hi, We have a FirePower 8350 appliance configured for IPS "monitor-mode" or IDS mode. The FirePower appliance connects directly to our Nexus 9k core switches. We have SPAN configured on this core switches to send a copy of the traffic to the FirePo...
