Don’t be fooled when it comes to firewalling! What really matters? Well, it comes down to packet in and packet out and whether or not you achieved the proper security effectiveness without disrupting the application or service. That's it! Regardless ...
Forum Posts
Is Digital Resilience Impacted with Traditional Virtual Firewalls? Most people in the industry are fully aware of virtual firewalling within the vendors’ hardware offerings, but do they stand up in today’s modern world? Let’s explore this in more det...
Opened a case about this error. Was given this link. Not very helpful to me but others might find it useful.https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/217616-troubleshoot-cisco-cloud-configuration.html
Resolved! VRF Question
HiWe ahve an FTD and subnet 172.16.251.0/24 ingresses via a sub-interface in global routing then egresses via an interface in a user deifned vrf, my question is how do I route the return traffic to 172.16.251.0/241. Do I add a static route in the vrf...
I am using an Internet connected data interfaces to manage an FTD from FMC. This is working as expected. Now I want to add a 2nd interface as a backup management interface using a data interface connected to to my internal network. The 2nd interf...
Hello, A customer need to migrate an ASA 5555 to FTD 3105. I just did a test migration (using Demo mode) based on the running configuration I received from the customer. I then went throguh the pre-migration rapport and noticed that there was quite a...
We are attempting to allow Microsoft Intune traffic through our Firepower appliance running version 7.7.10. However, the traffic is being inspected by Snort and is reported as blacklisted. Even though the relevant objects, URLs, FQDNs, application fi...
Resolved! Anti-spoofing in Firepower 1000/2000
I need to configured anti-spoofing in Firepower 1000 or 2000 using Firepower Device Manager. I did not find the procedure in the Cisco website. Does someone know if this option is available? I found this option in Firepower Management Center. https:/...
Resolved! FMC upgrade and BIOS hotfix
Hello everyone, I’m looking into the upgrade of our FMC 4600 HA pair from 7.4.2-172 to 7.6.2-329 (currently the suggested release). Looking at the documentation https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/management-c...
How can I manually filter individual URLs or groups of URLs Y without a special license in FTD
Hi Experts, I am trying to integrate FMC and FTD administrative users to authenticate via Cisco ISE radius type authentication. Cisco ISE has been configured with AD group sync and also FMC and FTD devices are added in ISE to use radius authenticatio...
Working on a set of firewalls that are being migrated from ASAs to FTDs (3 sets of HA clusters). All 3 sets have OSPF configured, with 2 of them "default-information originate". The 3rd has this for it's OSPF configuration on the ASA: prefix-list S...
In FMC 7.6.x, we configured two ISE servers as RADIUS External Authentication Object.The ISE are forwarding the authentication to our Windows AD.The user now makes one bad login attempt to FMC and the AD account is being locked. AD is set to lock the...
Hello, I’ve setup a posture configuration to work with our RAVPN. Basically I’ve 3 rules: Compliance OK, where I return a permit all ACL Compliance not OK, where I return a limited ACL Compliance unknow, where I’ve configured on the authorization pro...
Resolved! FMC: Automatic renew certificates?
Hello,Managing certificates is getting more and more a nightmare as the valid lifetime will be reduced to 47 days, especially on devices and virtual appliances that don't support any kind of automatic renewal protocol.What are the options in FMC to a...
