Network Security

Firepower 6.1 - SSL decryption random drops - ASA 5516 + FMC

Hey, I'm trying to make outbound SSL decryption work but have been facing many issues. When I apply an SSL inspection policy I'm having really weird results (see issue below). Right now I only have one rule in my SSL policy : decrypt everything from...

New custom Application Detector - reboot required?

Hi, Hoping to avoid a reboot or services restart. Does anyone know if you still need to reboot/restart firepower once a custom Application detector is applied? Using version 6.0.1.2

ASA Firepower Sensor Deployment and Logging

I am deploying ASA5525-X with Firepower IPS using Firesight 750 appliance and I need some basic guidance. I have defined ACL on the firewall with logging enabled and directling all accepted traffic to IPS sensor. Now since the ACL's are enabled with ...

discover new interface on ASA using FMC

I recently configured a new, named interface on my ASA. I then rebooted the ASA and went to FMC to add this new interface to a security zone. I could not get FMC to see the new interface. I ended up having to delete the ASA from FMC and re-add to ...

Resolved! URL and AMP licenses added through ASDM - Now missing in Firesight Manager

We have two new 5516 ASA with sourcefire modules. Modules were upgraded to version 6.2.0 We have purchased TAMC licenses. We created and added the licenses to the sourcefire modules through ASDM. Now we deployed Cisco Firepower Management Center vers...

Cisco ASA5545x SNMPv3 help

Community. I am trying to configure SNMPv3 on my 5545x and have Solarwinds monitor it via SNMPv3 as well. Im running into an issue where eventhough im entering the passwords and encryption/hash methods exactly the same on the NMS (Solarwinds) as I d...

ASA Hairpin to C4500 VSS

Hi Guys, Good Day! Just want to ask if it is possible if I have an ASA using single context mode hairpinning connecting to C4500 in VSS? Thanks

Resolved! Very Slow Internet after NAT rules are enabled

Hello, My internet connection crawls when I enable my NAT rule 1-5 on the 5506ASA. Picture shows all of the rules. The Nat Rule that should take care of my internet connection is rule 13. I also took a screen shot of my Connection rate and Xslate st...

Resolved! Site to Site VPN using 2 ASA's

I just got this job a couple of weeks ago and they have older Cisco equipment they want me to work with right now before I let them know of my recommendations for upgrading. We have a WAN link from Cox in San Diego, CA. that provides the internet for...

Resolved! Cisco Firepower Threat Defense User to IP Mapping?

Hello, I would like to know How User to IP Mapping works in Cisco Firepower Appliances 9300 and 4100 Below are My Questions: 1. Maximum Number of AD Servers Supported in FTD ? 2. Can we Integrate Existing Syslog with FTD for Identity Based Polic...

Resolved! Shell access on Firesight MC

I SSH'd into my Firesight MC server and went into shell access to check something. However, I can't figure out how to get back into the FS IOS now When I SSH back into the unit, it goes right into the Linux shell Anyone have the command to get me ...

Browse time and time of access to a site

Hi, I am working on a report to display date, time, url and browse time for users. Can anyone help with this. I'm using connection events but there are no options in the "field" list to get time the url was accessed and the numbers of minutes/hours s...

Resolved! ASA 5505 8.2.1 upgrade to 9.2(4.5)

Hi, we have a single ASA 5505 with 256MB RAM (10-Users Base license) and we would like to upgrade to 9.2(4.5). According to the documentation, the upgrade path would be to upgrade first to 8.4. http://www.cisco.com/c/en/us/td/docs/security/asa/migr...

Delete unused object-groups

Hello Community!I would like to clean up an old ASA (5520) which is still in production, so I cannot just wipe the config and start over and I was wondering if there is way to know which object groups are being used and which are not (so I can delete...