Full disclosure, I am a Juniper guy But I've inherited a cisco 1140 firepower ASA firewall appliance. All the docs I'm reading seem to indicate I should be able to ssh in (I can) and then run enable to be able to make config changes(i can't). Ther...
I recently installed a HA pair of FirePower 1010 devices running ASA software.After working out how to enable the license tiers and Security-Plus feature they were working OK and I tested failover several times as well as upgraded the software to the...
In 2021, I completed the installation of Cisco Firepower 2110 NGFW in a project and the license period was 1 year. In 2022, the license expired but my device continued to work. yesterday suddenly the internet went out, even the changes I made on the ...
Hi to all ,i am in the phase of implementing Security Intelligence to an FTD, and i noticed that there are numerous URLs that can be blocked via Security Intelligence when it is activated.For example i noticed that there are (currently speaking) 2044...
Helloi want to know what's the difference between positive security and negative security Cisco ?i wait a reply from expert security Thanks
Hello, do FPR firewalls support SD-WAN out of the box or are there certain images and licenses required to support SD-WAN on, as an example, a FPR2110-ASA-K9? Thank you,
I recently restored a 1040 from a previous backup. I can show the running config at the CLI but the GUI (FDM) does not reflect the configuration.
Hello everyone I have switches with different platforms 2950 , 3750 , 3560 ...... I want to change the port of SSH , but the command ip ssh port not found ... be informed that the IOS is ipservice type for layer 3 switches
I am not having much luck with the FirePower 1010 platform. I have had to RMA two devices so far and I've had an unrecoverable software crash on a third.I'm now back to two devices - one from the original delivery and a second new one as we have had...
Hey everyone, Getting the following error while trying to launch the FDM API Explorer (trying to change the time zone): I tried, https://x.x.x.x/api/api-explorer: {"message":"Unauthorized","status_code":401} I am running version 7.2.5-208. Thanks! L...
I am using either type 8 or 9 encryption i.e.username demo1 algorithm-type scrypt secret <secret>However I want to use password policy such aSpoileraaa new-modelaaa common-criteria policy policy1char-changes 4max-length 25min-length 8numeric-count 2s...
Hi,I am setting up FTDv. I already have internet access (can ping 8.8.8.8 and tools.cisco.com). But on my FDM, it says"Gateway cannot be reached through port GigabitEthernet0/0 named "outside". have to cover Public IP for security.
Hi All, I am trying to understand what traffic is usually expected to flow through the "nlp_int_tap" interface in an ASA device. The only reference I found, so far, looking at Cisco docs, is that this interface is used for system communications: ht...
I am currently working on sending Syslog alerts (events from the FTD rules) to Elastic SIEM, and I've been tasked with using TCP for this purpose. However, I couldn't find the TCP option in the FMC settings.I thoroughly checked the official Cisco do...
Hi All, I am working on Cisco FTD which are managed by FMC. I ahve conifgured the DNS group: I did an nslookup from the firewall but the firewall doesnt seem to resolve google.comI ahve route pointing towards the inside interface for 10.0.0.0/8 subn...
