Is there a way to search or filter an ACP on the FMC for rules that has the default "Any" value parameter?The search rules option is the closest but what search parameter to put (ie. on source or destination networks) if I want see the policies that ...
Forum Posts
When I restart my MAC I receive and "Attention Required" notification that says "Cisco System Extension Blocked: Your system requires you to enable the Cisco AnyConnect System Extension in your System Preferences in order to leverage the full extent ...
Hello Folks,Hope you are doing well.I am new to to the security and tring to setup a LAB with FTD and FMC.I just configured an interface of FTD from FMC but while deploying that getting error related to CPU and now trying to do it from CLI using API....
Hello, A customer are having some issues with performances when the CPU of there FTD 2130 sometimes reach 90% and start dropping traffic due to occasionally high amount of traffic. This is mostly internal traffic within a Kubernetes cluster. If we w...
I used to work in a role where I used Cisco AnyConnect on my personal MAC to access my work VPN - this was years ago now. Following the uninstall process, everytime I restart my MAC I receive and "Attention Required" notification that says "Cisco Sys...
Resolved! Cisco FTD Rule deny traffic based on OS
Hello, Is it possible to create a rule in FTD to deny traffic to a URL based on a combination of OS and source network? In the FTD dashboard it keeps track of the OS's that flows thru it. I want to create a rule to deny traffic based on the OS and s...
Resolved! Weak SSL/TLS Key Exchange
Hi I hope your doing well in our network infrastructure where we have Qualys to scan for vulnerabilities i can't find a solution for this certain vulnerability here are the details :Weak SSL/TLS Key Exchange impact an attacker with access to suffici...
Resolved! Weak SSL/TLS Key Exchange
Hi I hope your doing well in our network infrastructure where we have Qualys to scan for vulnerabilities i can't find a solution for this certain vulnerability here are the details :Weak SSL/TLS Key Exchange impact an attacker with access to suffici...
Resolved! Azure vFTD NAT rule
We have deployed a vFTD on the Azure environment. The configuration of the firewall is as follows. inside interface ip : 10.2.2.4/24 outside interface ip : 10.2.1.4/24 internal server ip : 10.0.0.6 Also the firewall is able to ping to the server from...
Hello All,I have been working on establishing a certificate between my firepower device and my Windows Server Certificate Authority and have had no such luck. I have followed the below linkhttps://www.cisco.com/c/en/us/support/docs/security/firepower...
I was able to connect to my Firewall using the FQDN, download AnyConnect and install (Win 10 Pro), attempt a connection but I get the following error: VPN Establishment capability for remote user is disabled. AVPN connection will not be established.M...
FPR-2130 ASA Version: 9.14(4)23 ASDM Version: 7.18(1)152I am getting errors:syslog-ng[531]: Syslog connection broken; fd='14', server='AF_INET(203.0.113.1:514)', time_reopen='60'syslog-ng[531]: I/O error occurred while writing; fd='14', error='Connec...
While trying to delete the used Alert the FMC gives a generic error: "This Alert Configuration is in use by 1 Policy and cannot be deleted." Is there any other way to see, where the alert entry is applied?
after erase secure -command Firepower 1010 will not boot anymore. How to install image back? information from console while attempting boot: media drive disk0: not presentAttempt autoboot: "boot disk0:/installables/switch"media drive disk0: not prese...
Bonjour comme précisé dans le titre, j'essaie d'utiliser l'ASDM sans avoir à installer Java. Il me semblait que la version openjre me permettait de faire ça, sauf que lorsque j'essaie d'importer cette version en ligne de commande j'ai le message suiv...
