Hi team, Need help in understanding an issue faced when creating a tunnel between Asa and Sonicwall (Issue got resolved) still need help to understand. SonicWall: Phase 1Ikev2Encryption aesAuthentication sha265Dh 14Lifetime 86400 Asa: phase 1Ikev2 En...
In my SSL/decryption policy advanced settings I have chosen the option to block unknown cipher suites and therefore in my connection logs I see lots of connections that are blocked due to unknown cipher suites, which is expected. However, the partic...
Hi All, I have a need to deploy an HA pair of ASAv in Azure. I've read the Deploy ASAv on Azure Cloud document and I understand that the ASAv is required to have interfaces in four subnets, not including the Azure GatewaySubnet. My Azure Virtual...
Hello, I have a firewall configured active/standy lan failover. Over the weekend there was something that happened and now the standby is active. Below i posted the failover state, for security purposes i just left out the actual ips on some. I know ...
I geoblock traffic from most countries. I have run into a few websites that my clients need access to but are located in one of the blocked countries. Is there a way to allow these websites through AND continue to block other traffic from the count...
Hello guys,So as we deploy (add) the Cisco FTD and FMC in VMware Workstation with the .ovf file, the default disk size is very less and since we can thin provision, how can I increase this size to 2 TB.Also, once I upgrade my Cisco FTD or FMC, does t...
Hello!We have a Cisco ASA running version 9.18.4.22 that we are trying to do port forwarding on. Right now an endpoint hits the outside interface ip and should forward the traffic to one of our servers that sits on the inside interface. I had set thi...
Hi,I have two questions on the behaviour of 3100 Secure firewalls in a cluster and interface health checks.We have a pair of 3100 secure firewalls (running FTD), that we have setup in a cluster, managed by FMC. All devices connected to the two FW's u...
Hello, How i can import YARA rule in Firepower Thanks,
I have a pair of FPR2130 running ASA code in HA. Everything looks configured OK to me, though obviously there's an issue somewhere! sho failover presents no errors.I need to failover to compete a firmware upgrade, however when via the primary device ...
We are using a Firepower 2100 series.This Firepower is running in platform mode and 9.16(2)14 as the OS. We are considering upgrading to the 9.18.4 series to fix a known vulnerability.I am assuming this will not be a problem as there is a proven proc...
We are currently operating Firepower 4120 devices with version 7.2.6.As part of our annual requirements, we need to conduct PSN scans.To accommodate these scans, it's necessary to disable the IPS feature, as it interferes with the process.Our Access ...
I am attempting to migrate an ASA configuration to FTD and when I run the migration tool and the below selected the parsing fails. When I deselect RAVPN option the parsing is successful. What could be causing this?I have checked the licencing on the ...
Hello,the question is in the title. Is it possible to use the ASA as a router between 2 internal networks? interface GigabitEthernet1/1nameif outsidesecurity-level 100ip address 10.0.1.254 255.255.255.0interface GigabitEthernet1/2nameif insidesecurit...
Does Firepower have the ability to setup and filter on policies that are based on words, numbers, etc...? Not content restriction or URL filtering. But a dirty word search and filter.
