Hello there!Cisco Firepower 1010 Threat Defense Version 6.4After rebooting the device always connect to FXOS mode. To get to FTD I have to enter "firepower# connect ftd" command all the time. Could you please tell me how I can skip FXOS mode on boot ...
Any active Firepower users - can you point me towards a list of cipher supprted for SSL decryption? I can't find anything in the docs except stupid note that you have to ask TAC for it...
I have found a bug in Cisco Packet Tracer with the ASA 5506-X not being able to perform NAT using; object network vlan10 (example vlan name)subnet 10.1.10.0 255.255.255.192nat (inside,outside) dynamic interface To resolve the issue of addresses not b...
Hello netpros, I want to NAT a Private IP on DMZ to a specific Public IP, we have the subnet for ex. 7.7.7.0/29 , 7.7.7.1 is the GW and .2 is assigned to the Outside interface. I did some research and find out that i need only one Static NAT to Let t...
Our Firewall ASA5545-X with FirePower module required to upgrade to the latest version.We already upgraded the ASA version to 9.14(4)22.We need to upgrade our FirePower module from version 5.4.0.12 to version 6.6.7 because our Firesight Management Ce...
Just want to be sure. So If establishing connection from internet to private internal server, the translated source would be the private IP want to nat the public IP to? The Translated destination would be the IP of the internal server?
Hi,The status LED on my newly purchased FR1010 keeps flashing non-stop. The other 2 lights become solid shortly after power on.What could the problem be and how can I resolve it?Thanks.
Hello.I need configure automatic switching from primary internet connection to a backup connection. The connections are from two different providers and, of course, different addresses. I can't find eny informatin that can help me witch that. I hope ...
Hello, Is there a way to enable / use RESTCONF on a Cisco Asa ? Please let me know. Thank you
On one of our sites, we have a Firepower 2110 configured for WCCP. Previously, it's WCCP Router ID was an unused ethernet port that was configured with an IP address, but not physically connected to anything. It was this way, when I inherited, so I...
Hi All, Wondering if I could get your take on something and if I've got a misconfiguration in the deployment somewhere? We have some FTD's managed by FMC.We have live VPN tunnels and we've been using the mandatory ACP area to define the access rules ...
Good afternoon, We are planning to move a FMC pair which are hosted across two datacentres, to two new datacentres. We have to change the IP address of the FMCs which manage a number of FTD pairs. My plan is: From the primary FMC (FMC1) GUI go to ...
Is there any security benefit by putting in specific deny's for say known bad hostsin a firewall rule base when the rule base has an implicit deny all in it?
HejI have enabled the interface on FMC and saved the configBut if I check the CLI on the fw, it still looks shutdown. Am I missing something?> show running-config interface Ethernet 1/12!interface Ethernet1/12shutdownno nameifno security-levelno ip a...
Hi there,Does allocating an IP to diagnostic interface would cause traffic to the firewall drop completely?Just learnt this by the hard way. Diagnostic interface is enabled by default so I just added an IP, same range as the management interface as i...
