Hi GuysI am looking at moving from our Cisco ASA 5515X which we use for remote access VPN with DAP policies etc.We need new hardware so looking at a Firepower 1000 series.I have a few questions.1.Should we stick with the ASA software on the new appli...
Forum Posts
Resolved! No traffic from DMZ to LAN
Hello again,What worked in test environment failed in liveThe FTD is in production but I am unable to access LAN devices from the DMZ network. Can someone guide me in the right direction please, this is a bit urgent The DMZ interface is in switch mod...
I am trying to configure SNMP in firepower 1xxx series (1010) with FDM.Firmware is 7.3.1According to this similar guide, I enter some command.https://www.cisco.com/c/zh_tw/support/docs/ip/simple-network-management-protocol-snmp/213971-configure-snmp-...
I just completed 1600 FMC Migration and was wonderfing why I don't see the user configuration when just logging into the secondary FMC? Is it because it would need to be failed over to the secondary FMC in order for the cofiguration to be fully popu...
I am trying to configure the ASA to allow the External Network to access web service provided by DMZ web server which is on the DMZ network. Above is my network diagram.In My ASA configuration.route 0.0.0.0 0.0.0.0 next hop routerinterface e0/0nameif...
Hello,we are using a freeradius server for authenticating at our ASAs. Now we introduced a user who should be limited in his abilites; so we defined a privilege level (14) for this user to limit this account to certain commands.This now works for an ...
Hello,My topology is roughly:[PC]---<R1>---<ASA>----<R2>The port forwarding functionality I want to achieve is:From my pc @192.168.1.15: ssh 192.168.1.6:2222 =>(redirect) 203.0.113.2:2222 =>(redirect) 172.16.0.2:22I am trying to ssh from my PC connec...
Hello all,I´m new using Friepower devices and I was looking information about all types of policies and data flow.I found the attached image where you can see the flow after the Pre filter policy is first L3/L4 rules and then the traffic goes to snor...
We have observed more count for Unix Critical File Accessed Detected alert from the user “root” on the Host XYZ-FMC-SECONDARY. And also we observed multiple File names which is containing /etc, due to that alert is triggering. Can anyone help me how ...
Hello, I` am using FMC 7.0.5, connected Firepower 1120.Test PC connected to Inside port of Firepower IPS, Outside port watching to the Internet, policy (logging configured) and routing configured. I can connect from the Internet to Test PC which is i...
Hi All How can i add this commandes on two FWNG 55212 (with HA connexion) and via FMC 6.2.0: FWNG1(FTD) interface GigabitEthernet0/0 nameif Inside ip address @lan-FW1 mask vrrp xx ip @lan-FW1 vrrp xx priority 120 FWNG2(FTD) interface GigabitEthe...
Hi, I configured bookmarks to access by http to my web server on port 8000, after redirect by login it tries to go to standard 80 port, not 8000. I've many services on non standard port on that device. How to resolve issue?
Is there a way to implement pass rules in Snort 3.0 in FTD? It appears the action of pass is available in Snort 3.0 but I am not able to find any Cisco documentation on how to implement it. Creating a pass rule and then setting it to Action = Alert i...
Dears Please check below , when try to troubleshoot ftd firewall for policy and rule with follwing command , system support firewall-engine-debug. the results are coming like below. Please specify an IP protocol:Please specify a client IP address: 17...
Hello, I need to know about ASA file Management, and all kinds of existing files on ASA and where they are installed. I need to know about each file need or signification. Thanks community
