Hi, I have a task to Change IPS and AMP Policies to enforcement mode. Can someone explain what this is for and how to complete within FMC?
Forum Posts
Resolved! Firepower 1010 vs 1010E
The datasheet page below for the Cisco Firepower products indicates that there is a model 1010 and a 1010E. Does anyone know the difference? I have the 1010 model but was curious what the "E" version did differently. I was unable to find anything ...
Hello,I am extremely irritated and frustrated with FDM and have no idea why anyone would want to manage the FTDs locally (I do know why but that's beyond the point). I am in the process of going through ACL rules in order to migrate away from the FDM...
I have an FTD which is able to ping 8.8.8.8 and internet but not able to ping system tools.cisco.com. Threat Defence Cloud error is showing. This FTD is using the same DNS policy as another which is able to ping tools.cisco.com
Resolved! Packet tracer fails ASA 1150 Firepower
HejI have a ASA 1150 firepower. I am trying to NAT that comes from Internet with dest tcp port 666 to be natted to 10.250.1.54 tcp port 666 Here is my configobject network OSCAR-ANYCONNECT-IP host 10.250.1.54 object service OSCAR-ANYCONNECT-PORTS ser...
Resolved! FTD Migraton Uisng FMC
HiI dont have access to a lab so am asking a couple of questions'I want to migrate from one FTD to an HA pair, On the FMC thats is currently managing the single FTD there is a sub doamin for the FTD but on the new FMC where I want to migrate the FTD...
Hi, this might be a quick and easy answer for someone. Is it possible to upgrade individual firewall contexts within a 2130 virtual firewall and have them on different firmware? (running ASA). Or will they all get upgraded at once?Thanks.
Troubleshooting an access error with System Support Firewall-engine-debug and the traffic is hitting an allow rule but says "Pending Rule Order XXX" but never allows the traffic. Can someone explain what this is and how to fix it?
Is there a way to remove interface configuration quickly? I have some decommed ints which are being used by objects and policies. Or is there a way to identify quickly which objects/policies these are and remove them
Im coming from a sophos background and this is my first time using FTD. We have a /29 public ip range that in the Sophos firewall I would just create alias interfaces for each public ip and assign to the physical WAN interface. (then do nat / fw rul...
Cisco switch Catalyst 3850 48 Port PoE - Vulnerabilitycan any one help me to fix the issuetest#sh ip sshSSH Enabled - version 2.0Authentication methods:publickey,keyboard-interactive,passwordAuthentication Publickey Algorithms:x509v3-ssh-rsa,ssh-rsa,...
Resolved! Unable to register FTD to FMC
I'm having trouble adding FTD to FMC. Originally I was managing FTD locally with FDM, but lack of features got me moving to FMC. I ssh'd to FTD, and issues the command configure manager add <FMC IP> <Reg Key> and now it says 'pending' I went on to F...
Hello, I installed pam_radius on a red hat/linux server and configured it with ISE radius authentication. Was able to ssh to it with configured user on the radius server. But one issue is that the user name must be on both of the linux host and ISE a...
We have two FTDs managed by an FMCv. both running 7.2.8. We are still using Snort 2 and will most likely go to Snort 3 after we are done upgrading to 7.4.2.We are thinking about a secondary network appliance that would possibly use snort as part of i...
Hi,I use ASDM and export Identity cert + PKey from Firepower 2310 ( ASA mode ) and when I import it to ASA 5512 it gives error:FP ASA version : 9.18(4)22ASA 5512 version: 9.12(4)37
