Hi all,
How can I block apk file and android software update in ASA 5525x firesight? I have tried various ways to block them but cannot success yet.Please help me to solve that.
We have a DMZ security zone on FTD and it has multiple VLANs / sub-interfaces, I found out every ACP created actually are duplicated to all VLANs / sub-interfaces, for example, my intention is:Source -> DMZ -> VLAN-A/Sub-Interface-A -> App-ASource ->...
Hi there, I had a question regarding real time monitoring on the FMC.Does the FMC have the ability to identify live sessions?Can we view info about Ingress/Egress zones, number of packets/bytes and interfaces etc... ?This would greatly help us to dee...
HI
We are using CyberArk PSM-SSH to SSH to ASA. The PSM-SSH application only supports diffie-hellman-group15-sha512. how do I upgrade the Key exchange to diffie-hellman-group15-sha512 (or higher) on an ASA
the Current supported Key exchange gr...
Hello,I've been reading through Cisco's site to site documentation and wanted to confirm there's no possible way for a site to site vpn to have both tunnels active? Seems you can only have active/passive. FMC 7.0 using FTD 2100 series. Thanks in adva...
Hello So on an inside server (192.168.5.42) I am running an NGINX Web-Server which absolutely needs to be on Port 80 and 443. My FPR1010 has, by default, https access via 443, so when I connect to x.x.x.182 (WAN) (which connects to 192.168.5.42) on h...
Dear Team , I have found this error in one FMC SETUP Deployment Cancelled due to Firepower Mangement Center restart. Retry Deployment. Only normal changes we have made in FMC . WE have raised case with cisco they did troubleshoot issue. And Last WE f...
Hello,
I have a customer with a SFR module on their ASA 5525. After the latest VDB update (361) they ran out of memory, resulting in traffic interruption. This is the warning they see in their FMC:
Configuration Memory Allocation - Resource utilizati...
Hi everyone,I'm trying to figure out if it's possible to provide the blocking page when a virus/malware is blocked, from the tests I've carried out it would seem not, the blocking page is displayed only with the URL filtering feature.So I wanted to a...
I am currently trying to set up RESTCONF on one of my lab CUBEs. For this i need the HTTPS server, and for that i needed a valid certificate on the router. Cisco IOS XE Software, Version 17.03.04abootflash:isr4300-universalk9.17.03.04a.SPA.bin So i c...
Hey! Currently working on FTD 1120 which is managed by FDM, and my query is.
FDM-6.6.1-91 VDB-336.0
- Configured Two ISP links on FDM with sla monitor.
-Basic configuration one access-list for Lan users to access internet and Nat policy which is in a...
I've spent the last hour or so trying to find documentation for configuring SNMP via FDM. We initially did this via flexconfig, but I'm thinking that when we upgraded to 7.0, SNMP was directly via the GUI. I can see it's configured, but there is noth...
The company I work for re-located their ASA 5510 to a new office location with a new static IP assigned to us from our ISP. If I update our NAT rules with this new static IP do I need to run the clear xlate command or should I just add new NAT rules?...
Hello,we relocated our Asa 5510 to a new office location and were given a new static IP and router from Comcast. I changed all of the previous rules and interfaces in the ASDM to match the new static IP that was given to us. I can see all of our serv...
Hi
I have two FTD 2130 (High Availability) and FMC 1600
I need to change the CLI server DNS on my high availability FTD 2130 (CLI DNS for management) no change DNS GUI on my FMC
the older DNS server no works and now don't have resolution name
I need...
