Hello all,None of the zones are able to resolve DNS. I can ping 8.8.8.8 from LAN and DMZ but cannot ping google.com. The DNS policy under policies > DNS is defaultDNS server group under Objects > Object Management has all the ISP provided DNS servers...
Forum Posts
Resolved! ASA firewall and Cisco ids
I am writing to request some information that would help me solve some problem in my university case study. I am particularly interested in learning about the following:The key differences between ASA firewall and cisco idsWhich one is more important...
Dears Please provide a best secure way to access dmz server from inside network via ftd fmc firewall . please provide if have any video or documentation for this . Thank you so much............
The use of VPNs (Virtual Private Networks is prevalent in today's digital landscape. This article provides a comprehensive overview of what a VPN is.VPNs are an essential tool for safeguarding online activities. It allows the user to create a secure ...
Hi Everyone, not sure anyone has experienced it (google doesn't give any hits for it) but I will try anyway. I want to use Firewall Migration Tool to migrate 3 contexts from ASA to a single instance on HA pair of FTD 3110s. This is supposed to be sup...
I am writing to request some information that would help me solve some problem in my university case study. I am particularly interested in learning about the following:The key differences between ASA firewall and cisco idsWhich one is more important...
Resolved! actice/active switch to active/passive
hii use 2 ASA in Active/Active MultiContext mode .and i want add 2 another ASA to my network , and switch to active/passivemode without multicontexthow do i convert or migrate every context configure file in system context (.cfg file for every contex...
How do I configure an access control policy in Cisco Firepower Management Center to block large ICMP ping packets?
HiIn the ASA with firepower module, can we use fail-open command with "no monitor-interface service-module" ?Can it still detect fail status of firepower module with "no monitor-interface service-module"
I have Firewall model Cisco ASA5516-X Threat Defense with IOS software version 6.6.5.1-15 and ill do upgrade to IOS version Cisco_FTD_Upgrade-7.0.1-84.sh.REL.tar so i need help to get the correct steps to follow in sequence and also my question abou...
Resolved! FTD HA Failover Reason
After our FPR-3110s failed over, I am looking for the failover reason. Where does one find this information? Currently running v7.3.1 on both the 3110s and FMCv.
Hello,I am looking to see the MAC address of a FTD interface that is part of a port channel.On the CLI all I can appear to do is run:show interface PORT-CHANNEL and it shows one mac address, not one for each interface. thank you
Hello Team,Managing my FTDs via FMC. Needed help to restrict ICMP on outside interfaces, but allow a few internal endpoints to PING them, for SNMP and other reasons.Once i do this under platform settings, ICMP is blocked to all, even on the permitted...
I have a requirement to bypass traffic inspection or whitelist ip addresses to allow pen testing to take place on our external IP address range. Previously achieved this using service policy on ASA's. With FTD's is the best option to use pre-filters ...
Community,In Firepower, is there a way to whitelist a specific IP address in the IPS policy so that the IPS policy does not inspect the traffic but where the IP is still subject to regular access control rules? A 3rd party wants to do external scans ...
