I have received the results of a PCI Pen Test that was ran against the network, and I am seeing a flag for the CVE-2018-0101 vulnerability for the ASAs. I am currently running ASA version 9.12(4)13/ASDM 7.13. I thought that this was resolved by Cisco...
Dearswishing you Happy New year Please share any configuration documentation for FTD configuration in DR site from fmc . I have installed and configured 2 ftd in HO, and one in in DR site. Thank you ..
Hi all, I am using FMC 7.2 to manage ftd2130, ASA555 and ASA5525. How can I generate report for all traffic that has been inspected by my IPS policy on ASA555 and ASA5525 Thank you guys
HejI was wondering if there is a way to move a line in ACL to another line without removing it first? For example move line 3 to line 2 without deleting it first?fw01-tgl-cph(config)# show access-list TESTaccess-list TEST; 2 elements; name hash: 0xd3...
I have an issue with FTD not mapping the nics correctly in ESXi. It looks like the Management and diagnostic nics use one virtual nic. In the FTD console I cannot get the outside and inside nics online. THe status shows disconnected in red. I cannot...
I have setup NAT and firewall on my C1111-8w8p router and I believe it is correct. Let me know if you see any other problems here. I am still learning. But now I need to block access to the router. Port scan of public ip shows 22, 80, 443, and 1720 o...
Dear guys,#inter fast 0/2#switchport mode access#switchport port-security violation shutdown#switchport port-security maximum 1#switchport port-security mac-address sticky#swtichport port-security aging type absolute#switchport port-security aging ti...
HelloSo, I have to believe this is pure coincidence but I am having wacky issues. The Internet works, when it wants to. I can load Google, MSN.Com, ebay.com but, NOT Yahoo.com! I play WORLD OF WARCRAFT Game, and they do not load. They will sit endles...
I am looking for best practices regarding implementing a firepower-2110 only to protect my internal vlans. I have 10 vlans that I want to protects from the other 20 vlans. The firewpower will typically not have outside/Internet access. Is it bette...
Hi i have been studying about port security how do they set Port Security in an ISP how can they handle all the MAC-Flooding attack it would be really helpful if you put your resources or any books that can help evolve my knowledgebest regards.
Hello, would anyone be able to explain me how to configure NAT for multiple internal subnets on a 5505 firewall?I have 6 subnets 192.168.2.0, .10.0, .20.0, .30.0, .40.0 and .50.0. It's configured like this for all 6 subnets, but the address translati...
Hello currently,I using ASA 5512x for VPN (b2b)I recently purchase firepower 1120 for replacement I was able to export config file from ASA 5512xhowever it is not running on the firepower 1120,I think it is not fit between them(copy config and paste ...
Hello Team Is it possible to deploy cisco FTD in one arm mode.Can you please help with that ? RegardsIng OZ
We were trying to integrate our IBM SOAR with Cisco Talos to get threat intelligence and we get the following window. How can we get the API key.Is integrating with Cisco Talos/threat grid free?
Hi,I recently upgraded a Firepower 1010 from v6.X to v7.X and with that the SNMP configuration I formerly did in flex config was warning as invalid. I've done the configuration via the API numerous times and never had any issues however most of the t...
