Cisco warriors, I need help with this please!I have SRX doing proxy-arp 192.168.0.0/16 with directly connected to cat 9300 cisco I want to put another SRX in between as a layer 3 for extra security. is there a way to keep the same IP address for the...
Is there any documentation related to Multi-site Clustering with Firepower?Is this still the best approach to protect North / South traffic?
I'd like to send syslogs etc sourced on an ASA to a destination that is connected via an IPsec tunnel on the ASA sourcing the traffic. Is this possible?I'd have to have a a no-nat matching the traffic and also "same-security-traffic permit intra-int...
I'm going live with FTDs for a new site managed by FMC soon. We currently have the FTDs (HA) setup and running. We have been testing VPN. We have other locally managed FTDs.(Plan to redeploy those later). Currently the default route for this new site...
I am implementing Anyconnect SSL client VPN and I only want 2 users to be able to access the network on this connection. How can I restrict that access? I have found different thoughts on this but nothing that seems to work. Please help.Thanks,Ken
"Deployment failed due to another deployment in progress for this device. Retry deployment," is the error. I have rebooted firepower manager system but it is still stuck in deployment. How do I kill the processors for deployment. Had to re-image S...
Hi. I'm trying to establish if I have my firewall setup correctly for stateful failover. We've had reports that failing over the firewalls caused ip phones to drop their calls, suggesting it is not setup as stateful. From what I can establish, it is ...
We can use Amazon S3 ESC Storage instead of instead of SFTP Cisco ISE 3.1 Patch 8
Hi Guys, I have a Cisco 1010 FTD using FW version 7.2.4 and I have 2 ISPs. One is a leased line but the other is a FTTC so that uses a PPPoE username, password with 1 singular external IP address. I have found the solution of an SLA monitor the defau...
Hi,I have a Cisco FTD 1150, looking to install a new ISP fiber connection. Currently, I have port 1/9 enabled, however, when I plug in the second SFP module to any of the other SFP ports (1/10-1/12), the 1/9 port gets disconnected along with the new ...
Hi,After upgrading our FPR-2110 running as ASA version 9.12 (4) to 9.18.4.22 , an object group and access list disappeared upon reload.We re-added them , however once again after issuing write memory and reloading the ASA again after a few days, the ...
Hi,My team is facing with this issue after upgrade from 7.2.5 into 7.2.7 and snort version 3.Anyone have any similar issue same with my team?
Hi all,I have an old Cisco PIX (I know, out of support, replacing later this year) - and was wondering if anyone would know why when I type in the option "show conn", some connections come back with no flags?TCP out xxx.xxx.xxx.xxx:443 in xxx.xxx.xxx...
Ok; here’s what I’m wondering… I have as mentioned in title an ASA5506W-X and management(1/1) ran to the inside(1/2) interface. I know I have the settings right but bc I don’t have another switch to use in order to connect to the ASDM to see that it’...
Hi there,We have FMC with a 1010 FTD, I'm looking to be able to apply web restrictions such as safesearch and social media to specific users however we don't have AD is it possible?A little context, this is for a public library, we have an adults and...
