Not being a security expert what does one do when they see IOC events within FMC? What are the actions that are normal to be taken when these events are logged to determine their validity??? I am still confused when I see events like in the attached ...
Forum Posts
Resolved! FMC 4700 Hardware installation GUide
Can anyone please share hardware installation Guide link for FMC 4700?
Hi,I have deployed Security Onion using snort2 system. I am getting alerts for some ET rules how to find the equivalent rule to block it on FMC/FTD.suppose I have below . how to find snort3 equivalant and block it as its passed by fmc/ftd and our ids...
Hi, I managed to enable certificate authentication on our Firepower Management Center and now I am unable to browse to the URL to make changes. I see others have come across this issue and they have been able to disable the cert via the CLI with ...
I have 2 x FTD 2120 -- I had the device registered on CDO & then converted to a HA configuration in a lab environment the FTD registered using the lab WAN IP I have to move the devices to the production network & therefore the WAN IP will change on...
Resolved! FTD FPR-3110 front panel LED status
On FPR-3110, is it normal for front panel led's to remain solid amber while 10Gb modules are active? Integrated ports E1/9 and E1/15 with Cisco SFP-H10GB-CU2M DAC cabled to Cisco Nexus and Meraki MX devices are both "up" at 10Gb and passing traffic...
Resolved! RAIDUS Fails Post Upgrade
Hi,Over the weekend we have upgraded a Firepower 1010 to 7.2.5.1-29 from 7.2.5-208 and since then RADIUS has stopped working for our remote access VPN.The NPS server sits in Azure so we have a tunnel between the Firepower and Azure and all is working...
Resolved! ASA 5515 help
Moved cisco firewall to new location and now cannot connect to the VPN, Does anyone know how to fix this issue? In down state now. I still have to clean configs, but wanted to get this in place. So I moved the firewall from Atlanta Georgia to Jackson...
i have a physical FMC appliance, which i try to reimage. but after i go to ( FMC system restore serial mode ) at the first step, it stuck there for hours and no additional action done.
Hi everyone,I just had a configuration question regarding a 5506-X ASA in packet tracer. I can't ping the router connected to the ASA. Everything is sub-netted properly to my knowledge and the interface Gig0/1 on the router has an address of 10.210.2...
I have no internet after using the wizard for some reason. I am new to Cisco ASA. Do I post my config in a text file to have someone take a look at where I messed it up? I cannot get to the backup because it is on a VM & the network is down.
Resolved! ASA ISSUES
Hello Everyone,So, I've been having issues with my ASA, with the host pinging, I'm only being able to get two replies or one reply back from its interface address. I can also ping the router, but I only get one reply back from the router or no respon...
.
Sales engineer questionAssumptions: Active/Active (or Active/Standby)Assumptions: Multi-Instance-capableAssumptions: Routed ModeIf running an active/active (or active-standby) FTD/Firepower cluster, dual-chassis, and implementing Bridge Domains and V...
Resolved! How can I Switch from Fdm to Fmc
A customer of mine has a Cisco Firepower 1120 firewall. I use FTD via FDM and my customer has a network closed to the internet.1) He told me that he does not have a license for FDM, he only has a license for FMC, so he can only produce tokens for FMC...
