I'd like to know if you have experience with upgrading an ASA5506 from 9.8 to 9.16. I have an s2s IPsec IKEv2 configuration with group 14 and 19. What impact will this have on IPsec? Could you please share your experiences? Thank you!
Setting up a new ASA running 9.18 and trying to tie it into AD. This is replacing an existing ASA that was previously connected to AD using LDAPS. On rhe new ASA I can do test authentication without any issue if I use port 389, but once I switch to 6...
Hello,Can anyone provide a list of OIDs to monitor below for cisco FMC 1600 1. Power supply units2. InterfacesThanks,Abdul Nafey
We have a number of FTD devices that, due to a deployment mistake, were all set to the same Unique NAT ID when registered to the FMC. It all works surprisingly well considering the issue, but only if 1 device establishes its connection at a time. How...
We are currently running 7.0.6.2 on the FMC and 7.0.6.2-65 on the Threat Defense units themselves (released 4-16-24). I'd like to continue to upgrade them but it looks like the next "Suggested release" is 7.2.5 released November 2023. Is it going b...
hi,i'm trying to enable local CA server on cisco firepower 1140, there is option to enable it using ASDM, but I get error.I tried CLI, and there is no command 'crypto ca sever' in config mode. Does it mean that this device does not have this function...
I am unable to get ping replies from my FTD outside interface when pinging from the Internet. I can ping out, through the FTD to Internet address from internal clients. Basically, if I do an nmap scan from outside - I see no open ports on my FTD. ...
Hi, im running a Cisco ASA 5505 with 9.1(2) with Anyconnect enabled. I read that there are some vulnerabilities on this device. Am i affected or any recommendations on what i should do?
HelloI need to export all events from level informational from an ASA5508 to a syslog server. Basically, I set it as "logging trap informational"This device provides firewall services as well as remote SSL VPN access and WebVPN.I noticed that AAA and...
Hello, I have a question about how a Cisco ASA inspects traffic and hits on an ACL? Does it perform scans from top to bottom, or does it select the best match based on the specific traffic passing the firewall? Thanks,MB
anyone experienced this weird error. i dont find any reason for the disk to be full since it is still running at 45%.tried clearing some log files on these directories but still the error still present/var/sf/detection_engines/<some GUID>/backup//var...
hi folks - with the amount of updates which suddenly causes me to upgrade FTD's urgently I would like to hear what other do for the Firepower Management Center. As this has to be at least on same lavel or higher it would make sense to be on 7.3.x cur...
Hello everybody,the customer has FMCv 7.2.5.1 running and I need to upgrade it because devices need to be upgrade too.The Cisco Software Checker shows me the rel. 7.2.6 in this release trainas the successor but the download page does not offer 7.2.6 ...
Is there any truth to the rumor that ASA software has been leaked, encryption reverse-engineered etc.? Just wondered if it's true or nonsense. I guess this might get deleted, which would be an answer of a sort I suppose.
We have CIMC reporting to our Tenable scanner that it is vulnerablity to Terrapin Vulnerability. see below : ./Terrapin-Scanner Report Remote Banner: SSH-2.0-OpenSSH_8.8 PKIX[13.2.3] ChaCha20-Poly1305 support: true CBC-EtM support: fa...
