Hello.My task is to investigate IDS/IPS solutions for my enterprise.QUESTIONS:1. ASA "Firepower" technology-- can this solution be implemented with only one ASA running Firerpower, or is an additional server needed?2. This solution requires Firepower...
Forum Posts
With Prefilter Fastpath, traffic bypasses inspection and is basically fastpathed out of the ftd device into what you may call a "toll bypass' hardware lane of some sort.With Prefilter Analyze the traffic does not bypass inspection....the question is ...
Is there any way that Snort can still block or drop a packet/traffic even if i already added a prefilter policy that sets as any any network and with fastpath? Also i have disabled all my access control policy except for default ACP that is set to "T...
We use the Cisco Firewall Migration Tool 5.01 on a MS Windows Server and cannot start the the tool. Error message: [INFO | cco_login.py] > EULA check for an user DEBUG | common.py] > session table records count:1[INFO | common.py] > Telemetry push : ...
HiI have a Cisco ASA 5506-X version 9.9(2)85, perpetual basic license with two WAN links - Primary (PPPoE to VDSL bridge) and Secondary (4G LTE modem/bridge).Although the 4G LTE modem/bridge is a L2 device, it has a mangement IP address which is reac...
Hi Cisco Community Right now we have an issue to migrate routing from Sonicwall to Cisco FMC VM as we found out that sonicwall can configure different Interface in one routing policy as per below. DMZ use X1 interface IP but gateway use X4 interface....
How to download all hashes stored on firepower management ?
Hello,Can't create NAT to inside from outside(pppoe) cause acl-drop in packet-tracernat (outside,inside) source static any any destination static interface TAAAS unidirectionalinterface GigabitEthernet1/1nameif outsidesecurity-level 0pppoe client vpd...
Hello,I have bypassed the sqlnet inspection, in packet-tracer phase 3, it shows that it is bypassed:Phase: 3Type: CONN-SETTINGSSubtype:Result: ALLOWElapsed time: 3794 nsConfig:class-map oracle-tcp-bypassmatch access-list oracle-tcp-bypasspolicy-map g...
Hello Community.I am exploring Clientless SSL VPN and i implemented smart tunnels and port forwarding.I want to explore how those options work by understanding how the traffic flows from the client to the ASA.I am looking for examples with the TCP/IP...
Please HELPI encountered this error after UPDATING the system from version 6.6.1 to 7.2.5Now it says that there is no access to the Internet, although all users have accessWhat can be done?
Hi all,I would like to address a question that I could not find the answer in the documentation. We have a Cisco FTD and we are asked to add an IP to the global black list. We are also using CIsco Security Intelligence. How can we check if the IP is ...
Hi,I have two FTD's in HA managed by FMC. When i run a trace using same criteria on both the FTDS from FMC ui, i get differnt results on the primary active and secondary standby. sample traces are given below. Is it normal that only the primary acti...
Resolved! FlexConfig for PBR on DMZ
Hi Everyone,I have 4 ISP's connected to my FTD 7.0.5 device ASA5508X with FMC 7.3.0. Now i have configured the 3 ISP's to route for our internal network and created a flexconfig for it then the other 1 ISP has been routed to my DMZ network and create...
