Question regarding what is specifically required to have a functional AMP for networks (module/application?) on FTD firewall utilizing the FMC.I know that it will need the malware and threat licenses for the specific firewall at a minimum, but is a l...
Hi,We have CISCO FMC to manage 4 FTD devices 2 in each region and working in HA.Recently it started behaving abnormally. we cannot deployy any new policy. When we do some changes to acp its and save it and then go to the deployment it says ""All dev...
Please don't shoot me down, I'm completely new to this, and it's actually part of a study question.I've setup an ACL on in the incoming port of fa0/0 of a switch in packet tracer. It successfully allows only even IP addresses in a specific range thro...
Hi Setting up Policy set in ISE. Please see below screenshot. WHat is relation between Library and Dictionary? Iooks like both Library and Dictionary can be used to build Condition for authentication and authorization. Anyone can explain it? Thank yo...
HejI am trying to push a file from my PC to an ASA. I have tried SCP, FTP and SFTP. Tried using WinSCP, Filezilla and SecureFX as software to push file but I can not connect.Is this because I am trying on Mgmt interface?interface Management0/0no mana...
HelloI would like to know best way to change ISP on a pair of asa ( active - standby).Currently, there are 14 public IPs on the ASA.By searching in the configuration txt file in :Outside interface, VPN, network objects, NAT, static route, crypto ca t...
Hi,I have new FirePower ASA 1120 to register for Smart license. I have used the usual process to get the Token form the Cisco Smart account and add it to the device. Although I have 10 devices license available but my license status remain as below;...
Hello Community,I need your collective brains with a situation I'm trying to solve.I currently have a couple of hundred endpoints that I can remotely manage, these endpoints traverse through a firepower to reach the management system I manage them wi...
I randomly keep getting the following on my Firepower console "Deny IP due to Land Attack from <outside port IP> to <outside port IP>I have read a few threads about this and using the information I have not found the source or cause. This just starte...
I am planning to migrate one FTD from One FMC to another FMC. 1st questions , if I deregister from FMC at that time after deregister I guess still there will be no outage ? Also I will re-resister from the new FMC and push the policy will it break t...
Hello all Can anyone advise on the FTD’s capability to detect and mitigate DNS exfiltration attempts? Would there be a SNORT rule to detect such activity? Thank you.
Hello,I am trying to access & control a Cisco ASA 5505 firewall via console access. The problem is that I do not have a working enable password and I need to reset it. I've checked the Cisco manual and other various posts online and these are the ins...
I have some firewalls running FDM locally and not managed by an FMC that keep shunning specific IP Addresses. How do I configure the FTD to prevent these IP addresses from being shunned like you can in an ASA or with the FMC?
Hi I have a Cisco ASA filling up our logs in thousands. Below is the error.I've been through the article https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog/syslog-messages-201002-to-219002.htmlBut I do not understand how to stop these...
we have many deterrent FW, all of types I worked in have two options for the configuration, GUI of CLIbut in Cisco FTD there is no CLI option, which is make it very hard to add a long object of dynamic template for exampleany solution for this weak p...
