What is the advantage of enabling sqlnet inspection and what is the down side of disabling sqlnet inspection "no inspection sqlnet"?I know very well the pro and con of enabling ftp inspection and disabling of ftp inspection but for the past five year...
Forum Posts
We have a firepower 2140 as our perimeter firewall and is running ASA software. We are noticing the ASP-DROP counters increase at a very rapid rate. I did a "clear traffic" wait 1 minute "show traffic" and we saw we are dropping 12600 packets/s on th...
Hello everybody,our customer has many ASAs that wan not upgraded for a longer time.I want to upgrade them from rel. 9.8 to 9.12 in the first step.Is there a tool that checks the configuration (attached) if it is compatible with the new OS release or ...
I am trying to set up an SNMP poller to monitor both devices within a primary/standby pair. The poller can successfully access the primary device/contexts , however it does not seem able to access the secondary devices.The 2130 Firepower pair is run...
Resolved! Do I need an an additional FMC license?
Hello, We have a Virtual FMC with a 10 devices license and we currently manage 6 FTD devices (3 failover pairs) We are now thinking about deploy a second virtual FMC and move 2 devices over to the second FMC. Will I need an additional licens for this...
Dear Community,We are using ISE 3.XX which integrated with AD. After login to ISE web portal ( GUI ) login AD credentials + DUO.Kindly help to recommend any required information / document support / guideline to achieve it.Does DUO can configure both...
Has anyone else seen an excessive amount of ESP probes being sent to every public IP address . Makes me think there's a new exploit out. Check logs on the routers. Haven't ever in past 20 years seen this much probing using ESP packets. Just a head...
Hello, When trying to create a subdomain in FMC, I receive the following error I guess I get this error because some of the L2L tunnels are managed by the same FMC. So what would be the best way to work around this issue? Should I delete the L2L t...
I have a client who is transitioning from an ASA to an FTD. I used the conversion utility and most was fine. one thing it did was put three of the interfaces into sfp ports. the client doesn't have the module and need to use the copper ports. I c...
how to fetch the top talkers from fmc via rest api we have enabled the rest api from the fmc and we are trying to fetch the top talkers from postman with providing the auth-token and the domainUUID https://{{fmc_ip}}/api/fmc/v1/topTalker?count=10 But...
Greetings,We recently upgraded our FMC and a few of our FTDs to version 7.0.5. Since then, those FTDs have been blocking Microsoft Updates with the reason "File Resume Block" even though they're trusted. Has anyone else experienced this? We have a fe...
Hello, I have the following access list on my Cisco router. How can I edit the order. For example, if I want to add a deny "15 deny ip host 8.8.8.8 any", so that it's in between 10 and 20, how would I do that? Extended IP access list 10510 deny ip...
Greetings,Using the FMC or CLI, how can I find the computer name of the device that an end-user is connecting from when they use Anyconnect client for RA VPN?FMC & FTD 4112's = 7.2.5Secure Client w/Anyconnect = 5.0.0540Thanks!
I kinda will nilly setup a file\maleware policy based off a youtube video I seen without really understanding it. I was hoping someone can explain to me based on the screenshots how my setup is working as I haven't had any complaints about files bein...
Hi all I have a local ISP stating packet loss is due to customer oversubscribing the circuit. When I run continuous pings I see individual drops or packets here n there not like big blocks of request time outs or anything like that. The Provider says...
