I am unable to get ping replies from my FTD outside interface when pinging from the Internet. I can ping out, through the FTD to Internet address from internal clients. Basically, if I do an nmap scan from outside - I see no open ports on my FTD. ...
Hi, im running a Cisco ASA 5505 with 9.1(2) with Anyconnect enabled. I read that there are some vulnerabilities on this device. Am i affected or any recommendations on what i should do?
HelloI need to export all events from level informational from an ASA5508 to a syslog server. Basically, I set it as "logging trap informational"This device provides firewall services as well as remote SSL VPN access and WebVPN.I noticed that AAA and...
Hello, I have a question about how a Cisco ASA inspects traffic and hits on an ACL? Does it perform scans from top to bottom, or does it select the best match based on the specific traffic passing the firewall? Thanks,MB
anyone experienced this weird error. i dont find any reason for the disk to be full since it is still running at 45%.tried clearing some log files on these directories but still the error still present/var/sf/detection_engines/<some GUID>/backup//var...
hi folks - with the amount of updates which suddenly causes me to upgrade FTD's urgently I would like to hear what other do for the Firepower Management Center. As this has to be at least on same lavel or higher it would make sense to be on 7.3.x cur...
Hello everybody,the customer has FMCv 7.2.5.1 running and I need to upgrade it because devices need to be upgrade too.The Cisco Software Checker shows me the rel. 7.2.6 in this release trainas the successor but the download page does not offer 7.2.6 ...
Is there any truth to the rumor that ASA software has been leaked, encryption reverse-engineered etc.? Just wondered if it's true or nonsense. I guess this might get deleted, which would be an answer of a sort I suppose.
We have CIMC reporting to our Tenable scanner that it is vulnerablity to Terrapin Vulnerability. see below : ./Terrapin-Scanner Report Remote Banner: SSH-2.0-OpenSSH_8.8 PKIX[13.2.3] ChaCha20-Poly1305 support: true CBC-EtM support: fal...
Hello,Similar to the discussion linked below. Id like to see the username of an ISE guest user on the source user in each connection event in our FMC. Similar to how it shows with our AD users (those are being IP mapped via the ISE identity source a...
Hi Team,We are using the FTD 2110 as ASA using the ASA image. Now we need to upgrade the FTD with the ASA image itself. May i know how to upgrade? As we do not have ASDM access to these devices? How to upload the image? Can we use TFTP? If yes, may i...
Hello, I just upgraded FMC to version 7.2.6 and want to upgrade a FTD H/A pair next. However, I can only select "unattended mode", which will copy the upgrade file to the FTD and then run the readiness check. I would prefer to do those steps manually...
I have been trying to set up ASA5508-X in transparency mode for a few months. I want to use transparency mode so I can drop it in an existing network. I get frustrated and put it aside for a while; let me head clear and try again. Transparency mode d...
Hello, Has anyone encountered the below error? Threat Data Updates on Devices SI DNS Lists and Feeds - FailureI have asa with sfr(6.2.3.6) and after upgrade to 6.4.0.4 i get this error. Any hints? Thanks and regards, Konstantinos
Title says it all. Anyone encounter this yet?
