I'm looking through my ACP within FMC and I see the following under the Advanced Tab - For the top option, what is best practise to set? This looks to me as if whatever is configured here will be processed before the actual ACP rules?Is this right (...
One of our application servers is alarming on Sourcefire IPS. The rule is “MALWARE-CNC Win.Trojan.NetWiredRC variant send logs (1:38358:1)”.I believe this can be a false positive, because is hitting the database port of the remote server, and I saw s...
Hello, everybody, I have ASA-5512 and FMC 6.1. "Network" and "Intrustion Events" sections have a data, while "Threats" - hasn't. What most likely could be the problem? Intrusion and Malware/Files policies were created and applied to Access Poli...
Hi All I was doing a Port Forwarding LAB in my GNS3. Inside source machine ( 10.0.0.25 ) is listening on 8000 port as Web Server. From the Outside say for example in my LAB user will be hitting from 192.168.137.XX Block and when it will be hitting...
Hi, Anyone knows how to upgrade a firepower device as a ips sensor whit version 5.4.0.1 to a 6 version? please helpme thanks
Say I have 2-3 ASAs, they all have been puchased with firepower services.. The virtual defense center allows for two devices per instance Is there a way to merge all the licensing into one instance of virtual defense center?
I have a job to upgrade ASA to customer. (From 8.6 > 9.6..) I saw in ASA version 9.0.2(and earlier) in section of DNS Inspection command they didn't have "tcp-inspection". policy-map type inspect dns preset_dns_map parameters message-length m...
Hey everyone, Let me preface this by saying I have very little xp with Cisco's in general but know enough to provide logs and configs if necesarry. The problem my client is having is trying to access the website www.sjrwmd.com For some reason the Ci...
Alguien que me pueda compartir material escrito para estudiar para firejumper ya que solo he podido encontrar los videos.
Hi, We want to integrate Cisco ASA with automation tool. Suppose if I want to add a acl in FW it will create rule through automated way without any human intervention. Is it possible to get API to integrate the automation tool.
I'm trying to compare a 2110 with bigger boxes like the 4100 series, or ASA-X. Let's say that we run FTD on all of them, can I expect exactly the same features from 2110? I'm asking because we had a quote and the 2110, even if it's more powerful on p...
Hi everybody. Last two days I issued problems with accessing several web-resources (usually - Google) when web-browsers in my network try to accept any content (like shared files, photos, etc.). On my border ASA I see that google IP services list i...
Hello all! I have recently acquired a new block of CIDR IP addresses from my ISP and I don't understand how to get it setup. WAN address: 68.x.x.232 WAN gateway: 68.x.x.225 CIDR network: 70.y.y.112/28 Usable addresses: 70.y.y.114 - .126 How d...
Hello, everybody, I've tried to install FirePower image to ASA and got a strange error message after: system install http://<HTTP_SERVER>/asasfr-5500x-boot-6.1.0-330.img "Package header failed verification - 'Header magic number mismatch'" Ho...
This is an odd one. From the sfr conolse i can ping intelligence.sourcefire.com , nslookup works as well also, but when I try telnet i get this; Failed to connect to intelligence.sourcefire.com port 443: No route to host When I try this command found...
