Security has scanned us and found openSSH vulnerabilities. I need to select the best version of NX-OS to upgrade severalnexus 7700. Security did not offer up a CVE, nessus says, " openSSH running on the remote host is prior to 7.8. It is therefore a...
Forum Posts
Hi All, Can you please, let me know if Bluecoat packet shaper 3500 supports tacacs+ Cisco ISE ver3.2. Bluecoat Shaper 3500 Series: Software Version 9.2 13p7.
Hi Guys Can you please share the CLI/GUI command to check snort version on Firepower device 7000/8000 series. Also the recent list of commands which is used for Cisco Firepower 7000/8000 series Current version of FMC is 6.4.0.13. Thanks in advance ...
Hello everybody,because the new vulnerabilty I have to upgrade a ASA5516-X with FTD from 7.0.5 to 7.0.6.2.The FMCv is running rel. 7.0.6. The upgrade a ASA5516-X with FTD from 7.0.5 to 7.0.6 failedeven if the readiness check was successful.I repeated...
I had a FTD Virtual register to a FMC which I need to remove and manage as a standalone device.I delete the device from the FMC.I setup the FTD to be used as standalone as per CLI command : "configure manager local"the GUI is working and I can browse...
Hi,Is the FMC managed FTD supposed to be reaching out to CISCO for security Intelligence? I have an FTD reaching out to 63.97.201.67.Is that normal. I thought the FMC reaches out to import and deploy to the FTDs.
Good Afternoon,I have an ASA 5525-X on 9.12.x. We have been working with TAC to try and migrate our ASA config to a Firepower 2120 running FTD code. We also have CDO. We are hoping to use CDO's ASA to FTD conversion tool, but so far as been wildly...
Greetings! In this week's What's new in CDO it was announced that the new Cisco Defense Orchestrator (CDO) public API has moved from beta to general availability! You can find the API docs here. There is the REST API, a postman collection, and a pyth...
A client asks me for a list which URL's are accessed. It has access to more than 40 URLs. I don't want to manually write them one by one from the URL Object. Network objects can be seen very easy in the CLI with the (show object-group id xxx) command...
Hi everyone,I have a client issue where they claim that Cisco AnyConnect falsely reports that Certificate has expired. When I connect with my own AnyConnect client version 4.10.05111, I do not get this false/positive error. Screenshot attached. Inter...
How can I create a report of reconciliation changes from the last 2 weeks in Cisco FMC?I tried to generate audit logs, but the results did not include the change details, as shown in the attached picture.
Hello, I'd like to ask if is it possible to use multiple PSKs in a single authorization profile? This would be beneficial in case some devices like sensors in IOT ISE group require different PSK (reason e.g. requirement of sharing the PSK with vendor...
I have configured NAT and access control on firepower ftd but it doesn't seen to work. I have a draytek router that connects to ISP via PPPOE and my firepower connects to the draytek, on intf1, intf3-8 is a vlan which connects 3 webservers and they a...
Resolved! Peer to Peer traffic through ASA 5516
Hello all,Recently there is a request from my user to use a software "Sonobus" that can allow other users to join together to share their audio recording. This looks like to be the peer-to-peer UDP traffic. Sonobus I decided to go ahead for testing i...
Resolved! SSH Access to ASA
I can't access our ASA 5505 via SSH from the outside. I've configured this through the ASDM to allow SSH (Device Management > Management Access > ASDM/HTTPS/Telnet/SSH). I added a rule that allows SSH on the outside interface from 0.0.0.0 0.0.0.0. Wh...
