Hello Everyone,We are trying to get a SQL cluster node to communicate on UDP 3343 from a host attached to our "DMZ" interface, to a host on our Inside interface. Packet tracer is saying the packet is dropped due to an ACL, but ive cleaned up our ACLs...
Forum Posts
Hi Guys,I am trying to allow internet with NAT to one computer in our network but I guess i miss something.CISCO ASA FW - p1/WAN (can ping 8.8.8.8)CISCO ASA FW - p2/10.5.100.254SW - p25 (defined as access port VLAN 100 - 10.5.100.1)to the same sw, ma...
Is there a Letter of Volatility (LOV) for the 3524 family of switches?
- FYI : https://www.cisco.com/c/en/us/support/docs/field-notices/725/fn72501.html >...For affected versions of Firepower software, automatic software downloads, Snort Rule Updates (SRUs), Vulnerability Database (VDB) updates...
Hi,i would like to ask about ikev2 proposal encryption. If we are using we encryption in IKEv2 proposal but i will use strong encryption on IPSec, can IKE proposal compromise ? Phase 1 will compromise ?If Ike proposal is compromise, what kind of data...
Is there a way to send connection events and IPS logs from the FMC instead of configuring each FTD to send to a SIEM?
Dear all,I would like to ask some help that i want to do deny policy at cisco ASA 5515-X base on country. i think it is layer 4 firewall, it is not possible, but i would like to make sure. Anyone can help for it? Thanks much.
FTD IPS is blocking a legitimate URL as web application BitTorrent. where is the best place to put an exception to allow this through. Thanks
Resolved! rate limit
Hi,What does 'rate limit" mean & do? E.G in QOSI read it in Thanks
I would like to know if we can use same username and password to connect VPN in different VM's or device.If there is any let me know the settings and configurations to be done
We are trying to enable SSH access via Platform Settings which is being pushed to 6.6.4 FTD and we are able to login with local accounts but not external accounts. We have an LDAP External Authentication Object defined and use an LDAP base filter to ...
Hello everybody, i need to know if is possible to monitor via snmp the SFR modules of an asa with firepower services pair.i've configured snmp both on asa and fmc but i'm not able to monitor the SFR modules, what can i do to fix(if it possibile)?asa ...
Resolved! DMZ & Internet Switches
DearsPls refer to the attached diagram, i don't have sperate internet switches so planning to connect ISP internet links on the DMZ switch with secure configuration, i m planning to create a Private vlan and port types community in which port 1-6 wil...
Looking for some insight on an issue we are facing when launching an ssh session to our FTD's.The behavior is that when a firewall admin accesses the firewall through ssh and they enter their credentials, the banner displays, and then the session jus...
Resolved! FP1010 with internal router
Curious if anyone has managed to get FP1010 working with anything other than a flat internal, L2-only network.I noticed in the CiscoLive BRK-SEC 2020 document for the Firepower 1000 series the statement that "Management interfaces can be placed on th...
