I can See network based IP blocks only within SI event view
When I blacklist a URL within connection analysis view and verify it is in the URL Blacklist within Security Intelligence section in object management and no entry in opposing whitelist for ...
Hi,
Need some advise on FireSIGHT User Agent. I have a FireSIGHT Management Center managing a number of ASA with Firepower service and integrate with global AD.
1. How many FireSIGHT User Agent shall I deploy?
2. FireSIGHT reports get the informatio...
Hello
I would like to reach a sip proxy via vpn. My vpn pool is 10.201.252.1-254 and i see the followings in the log:
"Deny UDP reverse path check from 10.201.252.53 to 10.201.252.255 on interface inside"
Routing table:
S* 0.0.0.0 0.0.0.0 [1/0] vi...
Does the management interface on the asa need to have "no shut" and a security level assigned? I have firepower services up and running but wasn't sure if I should leave it as default as shown below?
interface Management1/1 management-only no nameif...
Hello,
Replacing a 3rd party firewall that currently provides dhcp services to all internal clients, with new asa firewall that will provide dhcp services. Do I need to break the leases on the current clients and then install the asa and the clients ...
So I have an ASA 5540 and I am seeing a ton of underruns. I found this and thought it was pretty helpful for overruns, but i was looking for a more concrete description of underruns:Interface overruns, no buffer and underruns often show that the fir...
Looking for any documentation or links regarding setup, design, and support of Cisco Firepower firewalls and Amazon Elastic Load Balanced (ELB) applications.
I've found articles for Sophos, PaloAlto, and CheckPoint on how to setup/support internet ...
I have a 5516-X with On-box mgmt with around 1k users behind him and internet connection 150Mbps.When everyone comes and connects on the internet, the internet stay completely slow and the FTD stopped responding in the management interface.. We are j...
Just upgraded my 5505 to a new 5506. The network topography has not changed in any way and all objects, NATs and ACLs on the 5506 match exactly to those on the 5505. Everything is working as it should except that I can not scan to email from a Xerox ...
I have an ASA 5506 and trying to troubleshoot an issue with mail since moving to Office 365 Exchange Online. I still have an on-premise server which sends mail from our application. Since migrating to O365, mail from this server either gets rejected...
Hi,
I was reading the below documentation about API REST of chassis (FXOS):
https://developer.cisco.com/site/ssp/firepower/
But I haven't found more information (only it is mentioned at http://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/fx...
Hello,
We are using FTD 6.2.0.1
We are troubleshooting an issue and are trying to figure out, how we can follow a particular connection and see which signatures are firing for that connection, in real time - or as close to real time as possible?
A...
I have a ASA-5515 w/FirePOWER services.
I have a 3750X-switch with 2 workstations on their own vlan (I'll say vlan666), connected to 3750X-switch, when then connects to the ASA-5515.
The issue is, when I send traffic to the firepower (sfr), the sf...
