We have a "critical security finding" even though our ASA SSLVPN web portal login page is shutdown on our ASA 5525. The "test" that is done is an http get is sent to https://<external IP>:443/+CSCOE+/logon.html and a response is returned. The respo...
Forum Posts
I am trying to get this working to no avail. Whether I exclude the domain I want to resolve locally or include the domain I want to resolve through the tunnel the client sends all requests through the tunnel. I am specifying a DNS server on the gro...
Hello everyone, I'm currently preparing for the CCIE Security lab exam. While all the required virtual machines for the lab are available for download, I was wondering if there are any options to practice with the physical equipment mentioned in the ...
Hi All, I have recently setup two Cisco Secure Firewall 3105s and we have attempted a bunch of times to HA pair them but seem to keep running into issues. Firstly, both were registered with Cisco smart licenses and could reach internet and resolve et...
I'm in a situation where I need to use the FTD as the dhcp server for both my guest and internal subnet. At present I have it configured to give out my internal domain and dns servers. Can I use a FlexConfig configuration to modify the dns settings...
Resolved! License Help For ASA5510
Hello All,Longtime user of Cisco Community support and usually always find what I am looking for in here.I acquired an ASA5510 from a friend who was recycling old hardware in server cabinets and he asked me if I wanted this device, along with a few o...
Hello. I'm trying to update a firewall running FTD, managed via FDM, from version 7.0.1-84 to version 7.4.2-172. I uploaded "Cisco_FTD_SSP_FP1K_Upgrade-7.4.2-172.sh.REL.tar" on the System Upgrade section on the Updates page of FDM. When I click Up...
I’m experiencing latency issues with my internet service. I've identified that the setting "Intrusion Policy used before Access Control rule is determined" is enabled under the Advanced Settings of my APCs. My firewall is currently handling around 18...
Dear Team, We have both FTD 1120 Firewall. Between them HA peer configured. But for some reason we re image the standby firewall. Break the HA on primary firewall for rejoining standby firewall on HA.But after deploy HA on standby device HA Peer fail...
Greetings all. I have this little network I am working on and I have just came across an issue. The command I am trying to implement is"event manager applet BACKUP_CONFIG" . However, my issue stems from the fact that my other switches have taken this...
Resolved! FTD Migration Question
HIWhat is the easiest method to migrate FTD policies from one FMC then apply those policies to another FTD on the new FMC pleaselooks like I have to create routes, VPNs manually is this correct,? Thanks
Resolved! Firepower EOS 1120
HI Team - I am unable to find any link to check the EOS and EOL for cisco firepower 1120. Kindly assist me with same.
Hi,I have two Firepower 2100 series devices clustered and managed by FMC version 7.4.2. Previously, when I was using FMC 7.2, I had configured time ranges on some rules, and they were working correctly. However, after upgrading to version 7.4, the ti...
Resolved! migration from FMC (2500) FMCv (VMware)
Hi!FMC2500 is going to be EoL soon so we've decided to migrate to FMCv instead, since we already have all the hardware we need inour VMware datacenters.Current setup:2 x FMC2500 (in HA mode) v7.0.4(55).New setup, migration to virtual machines in VMwa...
This is an old question for an old firewall, but I've not found any definitive answer.I have found PLENTY of answers regarding the allowance of traceroute *through* a firewall.That is NOT what I'm asking.I need the firewall itself to perform the trac...
