Hi,To give something to the community, because it helped me today: I wrote this script to help in recent DDoS attack of our ASA firewalls. It can read list of IP addresses via HTTP URL or from local file and update defined object-groups on multiple A...
Forum Posts
Resolved! FirePower Realm is misconfigured.
So new too Firepower but if figure this isn't normal? It pops up every day, but nothing seems to be broken. We are a hybrid AAD setup, but we use LDAP to sign into firepower though. I did not set this up so not 100% sure about all these configuration...
Dear Good People,We have a scenario like below :Our main goal is to configure NAT on FTD-1000 via FDM to translate multiple address to a single public ip address. Please guide us to configure on FDM. And can we apply PAT overload on FTD same as route...
Hello Guys Kindly check attached scenario and please advice how i can design and configure DR site ftd firewall Do I required separate fmc for DR site FTD ? if not required how I will register DR site ftd in Head office fmc ? Can I manage DR site ft...
Dear Communitywe want to deploy firepower 3105 - ver 7.3.1 between distribution switch and core switch along with vlan tagging from both sides means vlan tag can be carried from distribution to core and from core to distribution for this purpose we c...
Hi,I have noticed that fmc ui (in analaysis ) e.g. checking elephant flows shows data in bytes..similarly many command that i need in ftd cli give output in bytes and bytes per sec .. e.g show traffic etc Is there any possibility to change them to ...
Resolved! CSWA transparent mode with L4 switch
for CSWA cisco secure web appliance in transparent mode.I know that you have to implement L4 switch and create a policy? I don't know why, can someone please get me a explanation why.
Resolved! limit of devices allowed in ise users
I have a question about what is the limit number of devices allowed for a user in the essential licensing of ise, if it exists.Context: They ask me if it is possible to link a single device to the user to only access the network with credentials, and...
Dearsi am introducing F5 SSLO orchestrator service in my network, On the F5 SSLO orchestrator i am connecting Cisco IPS 4000 series , Currently IPS is connected inline on the traffic path with pair of interface in and out as an bump in the wire, now ...
Yes, i have seen FMCv 7.x import of object groups - Cisco Communityit does not give the actual CSV format.what is the csv format importing objects into an existing group in FMC?If I were creating object via csv then i would needName, description, Typ...
Last year we ordered Cisco FirePower Management Center (VMWare) for 2 devices SF-FMC-VMW-2-K9and SWSS upgrades Cisco FirePower Management Center (VMWa_CON-ECMU-SFMMCVMK) both of them were active on Feb 2023 and now FMC are running on version 7.0.5 no...
I am little confused. What is the preferred or best method of restoring a re-imaged FTD (1000 series) that was part of an HA pair? Is it better to run a restore from backup... Or is better to simply configure the device with a barebones config and se...
Hi,I'm currently trying to implement redundant ASA architecture with failover technology, on packet tracer version 7.3.The problem is that i can't run the failover command on the ASA 5506 because the command is not found.When i do "show version" i ca...
I'm monitoring our Cisco ASA via SNMP.So far I found :- Total number of RAS sessions : 1.3.6.1.4.1.9.9.392.1.3.1.0- Number of IPSec VPN tunnels : 1.3.6.1.4.1.9.9.171.1.3.1.1.0- Total number of SSL Sessions : 1.3.6.1.4.1.3076.2.1.2.26.1.2.0I'm looking...
Hi All, I have BT broadband, I connected ASA 5525 and using PPPoE. The broadband itself is 400MB but the firewall interface that connects to BT is showing only 100MB. Its set to auto negotiation. ciscoasa# sh int GigabitEthernet0/0Interface GigabitEt...
