Network Security

Firepower Report - Host connected to CNC Servers - Incorrect

Hi All, Do others get this experience? Have you noticed on the Report template section 'hosts already compromised' on template report "Attack Risk "report is incorrect? I get dmz devices coming up as connected to CNC servers, however when investigati...

radware vdp in FTD multi instance mode

Hi everyone,We have two FPR4110. Can we use radware vdp feature in container based FTD (managed by FMC)?Can we HA radware vdp?

FMC ACL Audit?

Hi All, Looking to get some insight on the best way to move forward with this. I am looking to do a clean up of our ACLs on our Firepower's through the FMC to see if there are rules that are no longer being used or rules that don't have hits on them....

Resolved! FMC/FTD Realm Config - A.D. User 'rights' , minimum

good daywe had setup a Realm Config for A.D. <-> FMC sync....and i'm a bit unsure whether the 'svc-acct' that was made in AD actually 'needs' to be a Domain Admin member....or whether a bare minimum other Acct Privileges should be set instead. if any...

Restore backup on FMC 6.6

Hi felllows i'd like to restore a backup on a new FMC but dont turn off my old fmc. is it possible restore FMC backup with no changes on management ip address?

Dynamic Access Policy (DAP) for AnyConnect work around on FTD

We are in a testing phase with FTD. Currently, we use DAPs with ASA to control which users get certain Access lists when connecting with AnyConnect, and works well and is clean. I know that is not a feature in FTD yet (or maybe ever) but I was curi...

Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

Hi guys, I hope you are doing well. Our infrastructure is now being audited by a third-party company. We have 6 FTDs in our infrastructure and they examined only one of them with a "Slowloris" or "Slow Http" vulnerability and not the other ones. All ...

FMC/FTD SSH Login with Key

Hi, is there any possibility to login at FMC/FTD with generated SSH keys?We generated a public/private key pair and placed the public one through expert mode on the FMC. It seems that FMC isnt using this method and we dont know how to change it.Any i...

How do I know what SNMP OID of Traps on FTD interface up / down, reboot?

Hi All, How do I know what SNMP OID of Traps on FTD 2140/4115 interface up / down and FTD reboot? Nicholas

Resolved! Cisco FTD Supported SSH Version

Hi Guys.I hope you are doing fine. Our infrastructure is being audited by an auditor and they asked us to provide a proof which shows FTDs (We are using Cisco Firepower 2100 series) use SSH version 2.I looked everywhere in order to find out about the...

Mandatory rule in FMC causes network breach.

Hello peers,I have a customer who discovered that their internal servers, ones that were NATed to a public IP address and had specific ports open for access from the internet, eg HTTPS or SMTP, were being bombarded by all sorts of internet traffic on...

Resolved! Remote Access VPN, user identity "Not Found" Using User Agent and unable to use ACP to control RAVPN traffic per user

When a user connects to the remote access VPN. The username in the connection logs shows as "Not Found" and I can't use ACP to control traffic. It use to work back in an earlier version from FMC 6.2, but since stopped working even with the latest rel...

Resolved! Making changes on the interfaces on the Secondary Standby FTD while Primary FTD is running

We have 2x 2120 Cisco FTDs(managed by FMC) in the DMZ. Primary/Active FTD has a single L3 link to EDGE 1 and Secondary/Standby FTD has a single L3 to EDGE-2 switch. We are planning to deploy VPC on the EDGE switches where each FTD is going to have t...

Resolved! FIREPOWER: Cisco Cloud Services error critical

Hi Gents, We just upgraded an HA Firepower (FTD) 4140 to 6.6.4 and the said alert keeps popping up.Although I've read where to disable this, problem is, this is a highly secure firewall and completely isolated, meaning no internet access at all.When ...

Resolved! Firepower Backup

Hi, our setup is;ASA 5555-x active passive HA pairFirepower module installedUsing FMC for FP management My question is, what is the best way to backup FP specifically for an upgrade project where I can easily restore FP if I have issues with the upgr...

Network Security

Forum Posts

Firepower Report - Host connected to CNC Servers - Incorrect

radware vdp in FTD multi instance mode

FMC ACL Audit?

Resolved! FMC/FTD Realm Config - A.D. User 'rights' , minimum

Restore backup on FMC 6.6

Dynamic Access Policy (DAP) for AnyConnect work around on FTD

Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

FMC/FTD SSH Login with Key

How do I know what SNMP OID of Traps on FTD interface up / down, reboot?

Resolved! Cisco FTD Supported SSH Version

Mandatory rule in FMC causes network breach.

Resolved! Remote Access VPN, user identity "Not Found" Using User Agent and unable to use ACP to control RAVPN traffic per user

Resolved! Making changes on the interfaces on the Secondary Standby FTD while Primary FTD is running

Resolved! FIREPOWER: Cisco Cloud Services error critical

Resolved! Firepower Backup

We want to celebrate the October Spotlight Award winners!

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

Deployment failures on SFR via FMC

It's possible to reload SNMP service on Cisco FTD 2120

RADIUS authc for SSH access to FTD, session terminates after login

SSH Access to FTD Inside Interface

Is there any simulator where I can test ips custom signatures?

Cisco Firepower 7.2 - Blocking Page with Malware & File policy

Support port mirroring on Cisco ASA 5515X Layer 3 port

Cisco FMC De-registration License

DCE2_EVENT__SMB_BAD_NEXT_COMMAND_OFFSET

High unmanaged disk usage on /ngfw/var on 7.0.4 FTD