Network Security

An ICMP Session is removed in the fast-path

Hello everyone ! I am a newbie on CISCO ASA.My ASA config is as attached. I have created ACLs to allow IP, TCP & ICMP from my inside (192.168.123.164) to vendor_PC (172.16.4.1)When I try to ping from 192.168.123.164 to 172.16.4.1 i get following mess...

Firepower URL Filtering Policy doesn't recognize users from AD

I have a Firepower Management Center deployed with some basic URL filtering enabled.  When I apply URL filtering via IP, the filtering applies, but when I attempt to filter via domain user instead, the filter never applies.   I've created the Realm, ...

FMC Deleted Rule by itself !?

We recently had a major issue where the FMC deleted a rule apparently by itself ! FMC1600 physical device running 6.6.1Senario, I deleted some out of date office IP's & associated rules. Applied policy to FTD's & a major incident became evident. Afte...

ssh connection problem on ASA management interface

Here is part of the config:new firewall (without config )Just Ip management  ASA Version 9.15(1)1 ssh stricthostkeycheckssh timeout 5ssh version 2ssh key-exchange group dh-group14-sha1ssh 0.0.0.0 0.0.0.0 mgmt!interface Management1/1management-onlynam...

Cannot Deploy to IDS Appliances after FMC upgrade to 6.6.1

Hi All, Hope I have placed this in the right location.I have upgraded our FMCv from 6.2.3.16 to 6.6.1, however, since the upgrade I can no longer deploy to the appliances as the deploy button is greyed out.I can confirm appliances run 6.2.3.15 code s...

.

5508X ASA can stop all types of DDOS attack

i am using  ASA 5508X firewall.so is this device  capable to stop all types of  DDOS attack? like Volume Based AttacksProtocol AttacksApplication Layer Attacks or we go for some other device like arbor Ddos Protection for datacenter . please suggest ...

BFD peer is down

Hello,I found in cisco documentation that BFD is not available on OSPF, only BGP.So I use BGP protocol on my fw FTD 2130.I use FDM to configure this FTD fw. In the BGP part, I activated this line:"neighbor 1.1.1.1 fall-over bfd single-hop" When I run...

Cisco ASA 5510-x Firewall not showing ospf routes

Hi,I am trying to connect Asa 5510-x firewall with our existing ospf network. OSPF neighborship is coming Full, but asa not showing any ospf routes in routing table. can you please assist what can be the issue?Regards,Faisal

Downgrade SRU Update on FMC

I am looking for a way to downgrade SRU Update on FMC. I have two FMC, one has higher version than other. Due to the requirement, I have to downgrade the update to match with other. I cannot upgrade the lower version. I do not see an option to downgr...

URL Filtering Automatic Feed

Hello,I was just wondering if anyone knows what URLs are reached out to by FMC for URL filtering automatic updates as we are getting a URL Filtering Download Failure we are using 6.4.0.11 from documentation it seems like Automatic URL updates will us...

PIX to FTD

Hello,  I have a PIX-515E and I will install a new Firepower managed locally.  Is there any possibility for automated migration or the only solution is the manual one.  In the manual what should I be aware of? Thanks and regards, Konstantinos