Dear Good people,From the Product updates tab of fmc, we found 'Vulnerability Signature and Fingerprint Updates' are not installed and not updated . And in Rule Updates tab we found Snort rules are getting updated weekly automaticallyWe have TMC lic...
Forum Posts
I have a pair of ENCS based Cisco firewalls which I want to replace with ESXi based Cisco firewalls, I'd thought I could break the HA on the ENCS firewalls, build the HA with an ENCS firewall and an ESXi firewall to set up the ESXi firewall then brea...
Hello, We have two data centers (HQ and DR) and our customers have two data centers (HQ and DR).We have a requirement to create VPN tunnels from our data centers to the customer data centerswith maximum redundancy. My initial plan was to create total...
안녕하세요. Cisco 스위치의 취약점 보안 스캔을 통해 아래 정보를 얻었습니다. TLS ROBOT 취약점이 감지되었습니다. no ip http secure-server 명령을 사용하여 이 문제를 해결할 수 있습니까? 다른 해결책은 없나요?? 제품은 WS-C2960-24TC-S입니다.
Resolved! NTP vulnerability
Hi all, From the vulnerability scan, we got the below issue for NTP for Cisco Switch.Threat: The NTP service running on the host allows queries of NTP variables.Impact: A remote user can obtain sensitive information about the host by querying various...
Resolved! Backup and restore fdm
Hello all, Can anyone help me how to take backup and restore of firepower device 2100 manage by fdm on box using cli. Regards,Vishal
I have alarm light on on my cisco asa 5525 , it shows critical on channel 4 voltage but i think voltage is fine, can anyone explain the issue? (asa version 9.14.5) SCADA# show environment Cooling Fans: ----------------------------------- Chassis Fans...
So With VPN off, my WSL terminal can ping/ssh, but as soon as I turn on VPN, terminal cannot ping/ssh but CMD can. Here is a screeenshot. Can you please help me with this issue? I searched a lot but did not find a solution. The small terminal on the ...
Resolved! access list for SFR module on ASA5516X
Using FMC I can use platform settings to restrict IPs from accessing FTD interfaces via SSH but platform settings does not seem to be available for SFR modules. Is there another way to restrict SSH access to SFR based on IPs?Thanks,Diego
Resolved! Cisco Firepower 1010 For home
Hello ladies/gentlemen,Up till a month ago, I had worked with FTD 101 in an FMC and enterprise environment where the application is a bit different and very robust. We never even worried about what licenses they had because they came fully loaded.Now...
We recently began receiving the following sftunnel SSL errors on several FirePower devices. Devices have lost their connection to the FireSight and cannot be registered. Thanks in advance, for any helpful information you can provide. Excerpt from /...
Hi EveryoneThere are problems with FTD 1010, FTDv, FTD controlled via FDMIpsec sts is configured, but the download speed is 20 mb, and the upload speed is 2 mb through this tunnel. Tunnels are established through high-speed Internet channels. At firs...
When I check hit counts from an ACL in our FTD-unit (via the FMC) the time stamps have incorrect values. Study the attached screen shot. Hit counts where fetched at 13:22:27 but the "last hit time" is 13:44:49 (i.e. approx 22 minutes into the future)...
How can I upgrade ASAV10 to ASAV30 or ASAV50.What are the steps involved in it.
We recently upgraded from 7.0.4 to 7.2.4. then next day we started receiving alerts from our Smart Licensing that we have a shortage of 46K "Stealthwatch Flow Rate" licenses. That has been going on for a month now. We have been trying to deter...
