Hi team,I can´t make that access-lists works with FQDN.when i do show access-list the output show (unresolved) any (inactive) ASA CODE is Cisco Adaptive Security Appliance Software Version 9.12(4)38here is the configacl,asa,fqdnasa dns domain-lookup...
Hi, It looks like Cisco FTD will not support Authentication using Microsoft Active directory from very 7.x.x. It will use Cisco ISE-PIC. Is it true? https://www.cisco.com/c/en/us/products/collateral/security/firesight-management-center/bulletin-c25...
Hi, I am reviewing to do a Qos for one of the IP , which is routed at ASA. There are lot of usage for that IP ( Bandwidth Usage ) , trying to limit the Bandwidth usage during day time. Can we do Time Based QoS so during Priduction hour it can use l...
Hi All, My client is currently intermittent network connectivity issue. And i believe it is due to the IPS. They claimed they have bypassed the IPS module but when I check the configuration, it remain intact on the ASA5. From my understanding, bypa...
I have a requirement where i need to deploy 50 rows in an excel on FTD devices added in an FMC..is there any way i can do this via FMC-API or a script ? i am not very versed with FMC-API and it is very troublesome to create large no. of rules in an F...
in EVE-NG I simulated a simple network environment with an FMC (6.4.0-113) and two FTD in cluster (6.4.0-102). I also added two PCs in order to test the security policies and the traffic works as I expected: I created this LAB in order to replicate a...
Hi, I have two site as below. Site 2 is the backup of site1. They connect via site to site vpn tunnel. LAN-1 and LAN-2 can talk with each other well.I set up AnyConnect for Site 1, AAA is from Microsoft AD at LAN-1. It works well.Now I am trying to...
Using OS Code: 9.10(1)27When I do show access-list it gives me output with ACLs having object-groups in source and destination however under that it also list the IPs covered under that object group. I do not want that detailed listing and only the A...
Hi all, I can access but cant ping the host falling in different sub interfaces of Cisco Asa. Pls find below configuration and let me know what im missing. ALso im getting the below logs when im trying to ping host if between subinterfaces Built {in...
Hi,I thought could be useful to have the URL Filtering categories descriptions. Here URL categories feed used by Cisco Firepower/Firesight: http://www.brightcloud.com/tools/change-request-url-categorization.php#catdescription Hope this help,Dominic. ...
in Cisco ASA all VPN users accessing FW and servers using Cisco any connect with a specific URLI have changed URL which is recorded in Goddady, but once I connect the message shows certificate untrust , there are some CA certificate in ASA for old ...
How to find High Bandwidth Consumed Traffic from a Certain User. For I want find for a source what is the top ip that used / consumed high bandwidth within a certain time from FMC. Looking for some tips.
Hi, I need to set up FTD as answer-only for VPN site to site tunnel. I use FMC to set up. I could not find a place to do that, could you help? Thanks Loc
Hi all, I want to test my IPS Appliance Firepower 7120 whether can raech to my Syslog server in different subnet by using Ping. So, I ssh into the Appliance but I cannot find a way to exceute the Ping command. Below is the information on the Applianc...
Hi, Tried to register the FMC1000 device for smart licensing and got this error msg"Failed to send the message to the server. Please verify the DNS Server/HTTP Proxy settings."The DNS server IPs is configured and Proxy is not enabled. Tried the cur...
