Hi guys , I can't seem to allow my inside subnet to surf the web server in dmz. but my outside subnet is able to access my web server in dmz. access-list allow-web_inside extended permit tcp host 192.146.2.162 any eq wwwaccess-list allow-web_inside...
hi guys , why can't my pc surf https of the web server in dmz , but it can for port 80. i've tried almost every combination but it still doesn't work. when i did a simluation of the packet , it reaches the web server but when going back to the firew...
hi guys.I'm running SolarWinds server in my network . and I configured SNMP in switch for this server. I want when I configuring the switch such as spanning-tree or attribute VLAN to any port of switch, the log of this write in solar server. but I do...
Hello, we are migrating 5525-x to 5555-x appliances. We have two of each and the currently deployed 5525-x are in Active/Standby. The Secondary is Active at the moment. I have setup the 5555-x's in Lab and Active/Standby are working. I now want to de...
Hello, I had several firepower registered on my FMCv.after a crash of my server, I decided to install a new one.when i try to register my firepowers on the new fmc i lose the configurations on the ftd. how to register ftd to new FMC without losing m...
I have an ASA5508-X running the very latest ASA & ASDM versions. In the ASDM GUI, on the Access Rules page, none of the IPv6 rules are showing any hits, however from the CLI I can see hits. I'm guessing this is a bug. I've tried a few earlier ASDM ...
Hello, as the title states, the Firepower 1010 firewall somehow experienced a complete failure, just from rebooting it.2 days ago - the firewall was working fine1 day ago - my Mac workstation started complaining that its IP address was already in use...
Does Cicso ASA 5505 series supports SNMP v3 ASA running on software version running on 8.4(1) and 8.6(1)2
I'm trying to determine what these configurations mean: object network obj_any subnet 0.0.0.0 0.0.0.0 object network obj_any-01 subnet 0.0.0.0 0.0.0.0 object network obj_any-02 subnet 0.0.0.0 0.0.0.0 object network obj_any-03 subnet 0.0.0.0 0.0.0.0 o...
Has anyone here set up logging from FTD to Algosec? The only documentation I have found on the Algosec site with regards to logging was for ASA and there it stated that syslog message ID 106100 is needed. This syslog ID is not available in FTD afte...
Dear Community,Due to excessive malicious attempts to our network we decided to block traffic that come from specific countries on our Firepower Threat Defence. But we are still having attempts that bypassed the geolocation rule. the log shows that t...
Hello community,there is a new suggested software release for Firepower Threat Defense 7.2.4-165.In the past, if there was a new suggested release for FTD the same version was suggested also for Firepower Services Software for ASA.This time, previous...
We deployed FTDv on two different esxi hosts and enabled HA and monitored all data interfaces. Each FTDv is connected to vnic on vmware Dswitches which connects to physical switches. We found that when the vmnic fails, FW doesn't fail over because vn...
Hello, I recently observed our FTD is getting flooded with lots of Syslog ID 852001 & 852002 messages. It basically hundreds of those messages every minute (example below) Jan 23 2023 02:51:59: %FTD-6-852002: Received Full Proxy to Lightweight event...
I'm looking to disable the logging of the following event ids: FTD-6-852001: Received Lightweight to Full Proxy event from application Snort for TCP flow ip-address/port to ip-address/portFTD-6-852002: Received Full Proxy to Lightweight event from ap...
