It is my understanding that using "crypto key generate rsa" will generate two keys for use with SSH. One is a private key stored in NVRAM which cannot be accessed, and the other key is a public key. I believe this command should generate one general...
Forum Posts
Resolved! Cisco ASA Active Standby
Hello All,I'm doing a lab in my GNS3 just built ASA active and standby which is no issues but when i try to access the outside ip address which is the ISP i cannot ping it from inside interface but there is no proble from outside interface.I though i...
I have a Cisco Firepower 2110 and would like to have a backup internet connection. I don't want it to be a redundant system, I basically just want it as a fail safe in case our primary internet connection fails. Example, to be clear: If Ethernet1/...
This is an interface object that I am trying to delete. When I do, it fails stating that it is in use in a "Filter". It is not a prefilter or a url filter. I can not for the life of me find the filter that it is referring to so that I can remove th...
Has anyone re image the FMC from a bootable DVD before? How did it go? Thank you
I understand that since the FTD User Agent has been deprecated the new FTD user identity options are either ISE (with at least the Advantage license) or ISE-PIC. Does it matter which option you choose if you are managing the FTD via the Cloud-Deliver...
Is it worth climbing the Cisco ladder for security or is it worth focusing on the cloud based certifications ladders such as the AWS ? I personally am interested in pen testing. maybe forensics. And still love my hardware . But alas outdated or dead ...
Hi all,I faced a problem when replacing a primary ASA with an RMA unit and want to know where I did go wrong.This is what happened:The secondary unit was active and had all the config.Installed the new primary unit, configured fail over, connected th...
I was wondering if there is a way to view the means of communication behind the web apps available in firepower? For ex today I was researching how to only allow specific VLAN access to windows updates. I started by searching google and one guy gave ...
We have an ASA 5508-X running 9.16(4)18 that's only being used for client VPN traffic.We have a system that has privacy information on it, and the group policy requires all connection to the server to be encrypted. The problem is, all connections tim...
hi,i am having ftd's managed via fmc running ver7.0.1 and the FMC is configured too forward vpn logs to syslog server which is a forescout NAC appliance.Since we are not getting any logs in the destination, i want to know how to verify the vpn logs a...
I am using Cisco Firepower 1120 in High Avalability using FDM to managed the device, but time is showing incorrect as my standard time. It want to change to UTC 5 30, but cannot found any option to change.I tried to change from Fxos as per below scr...
Hi there,With ASA5585-SSP-20, if I didn't have any add-on modules, how many 10G interface is available?Cheers,HL
I've poked around a bit and haven't been able to see a way in order to implement a domain age rule on our Cisco Firepower which is running 6.6.5. I see online that a rule can be created using Cisco umbrella, but is there really not a way to implement...
Team Thank you for your continuous support. I have to upgrade the FTD 2110 HA to one of the customers without downtime. The customer wants us to break the HA into 2 standalone units and then upgrade the standby unit first while passing the traffic th...
