Im having trouble with one user working and saving a word document to our file server over VPN. Firepower keeps blocking it as malware, but looking at the file there is no obvious signs of malware. Firepower doesnt appear to give me any reason why it...
Forum Posts
Hi all, I have two ASA FirePower-2140 in Active/Standby Configuration. I need to configure one IP addres for management in FirePower-1 and other distinct IP address for management in FirePower-2 because I need to access both devices independently via...
Hello, I'm planning for a new FTD setup where the outside interface on the FTD connects with an etherchannel to a switchstack. On the same outside subnet there will be two ASR 1001 routers, each connected to different ISP:s. Now on the FTD I want to...
hi,I need to decrease number of fragments from default 24 to 1 one some ASA interfaces. show fragment command shows there are fragments comeing to that interface. How can I find source of fragments? Can I capture packets usimg ip packet offset or som...
Can we make Etherchannels to increase the bandwidth towards core switch from FPR 1120 or 2120? We have 1 GBPS ports only at firewall side and from the core switch to FPR, we required 2 GBPS speed to allow routing via firewall. The firewalls will be c...
We currently have 2 physical ISE appliances, we plan to add an additional one and will be hosted in AzureI am aware of the cost to the VM in Azure but confused a bit on the ISE license requirements. We are on the smart licensing on the current ISE de...
Hi All ,As Picture below. I try to failover ASA from Primary to Secondary and I monitor in ASDM data in graph lost while failover. I would like to know this situation is normal behavior of ASA or not . I'm running ASA Version 9.16(2)14 and ASDM 7.1...
Why does a visit to https://www.cisco-servicefinder.com/WarrantyFinder.aspx result in a certificate error due to CN being "anticounterfeit.cisco.com"?Certificate appears to be this one https://crt.sh/?id=9034231599 and that sure isn't for a www.cisco...
Hello all, I am trying to define FTD1150 using Firepower Device Manager and I want to permit deivces on any of my subnets with the same 4th octet at the host-portion of the address, so for example matching any from 10.1.1.250/24, 10.1.2.250/24, 10.1....
How to reset FMC to factory defaults?
Hi, I am trying to ingest logs from Cisco Meraki MX to my SIEM and I'm getting more event types that the ones listed here: https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Event_Types_and_Log_SamplesWould you mi...
Hi,Please walk me through how to block websites such as Facebook, YouTube or any adult contents. I have firewall 1100. Thanks Ammar
Hi I have x2 4115's in Active Passive HA. On my FMC, I'm getting critical health alerts for the secondary/passive firewall "not receiving any packets" on some of its subinterfaces. Is this normal or a bug? Or an issue with my health monitoring policy...
Hi All; May I know, What is the procedure for migrating the old firepower model to the new firepower model? scenario: Firepower ASA5506X managed by FMC needs to migrate to 1010 or another model
HI,We have been trying to make this work and so far not successful.We can get the metadata from the SAML group , but when SAML idp authenticates, the vpn anyconnect client comes back to the login window with a login failed. on the Debug we see no pro...
