Does IOS-XE 17.9.x still support the Stateful CBAC firewall features that use the IP INSPECT command set? This capability was available in IOS. We are transitioning from IOS to IOS-XE on edge router and are not seeing the same CLI commands for CBAC. ...
Forum Posts
Good day communityI would like to graph the connection count for our 9300 FTD. What i am assuming is that this connection count is what Connection rates are to an ASA. If so, what is the OID for the FTD connection rate. I have sat through hours check...
I am learning about NAT for Cisco ASA and the topic talks about Fallbac NAT where I believe if I'm understanding correctly you can point the traffic from the inside to use the outside interface to translate to and traffic out once they run out of the...
Resolved! ASA firewall 5512-x
My ASA 5512-x firewall got burnt by a power surge. I got a replacement of the same device. I swapped the HDD but it seems the new device didn't read the configuration on the HDD. My internet configurations are done on the firewall and I don't have in...
Hi all It seems Microsoft has now tightened their DCOM security in this months security updates:https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-...
Resolved! ISE-application no running
i have ISE 2.7.X , but application not run i have run the cmd: application start ise and after application start ise safe even i have done with config-rest and again try but not run after i have done re-image but not successful. i have used eve-n pal...
Resolved! RDP access from using PAT
Hello,I am using Cisco Firepower FTD 1010, the idea is to understand how to Access RDP from HOST A to HOST B and vice versa. The Idea is to Use NAT OVERLOAD from Inside to Outside (PAT) and Outside to Inside.
HI, Getting following logs on Cisco ASA firewall, Avaya phones are getting disconnected. Please let us know how to fix this issue. log on ASA: Unable to Pre-allocate H225 Call Signalling Connection for faddr
Hi to all I have to configure anyconnect from the guest-wlan with external dns-servers configured. NAT is needed to translate the public ip addresse of the firewall outside interface to the private ip adress of the firewall-interface terminating the ...
Hello everybody,our customer has a FMCv 7.0.4 and two Firepower1120 running 7.0.4.This morning I got a ticket because high CPU load on the FMC: Service: CPU Load (nwc_cisco_cpu-load) CRITICAL - load-15 is 15.81 (15 min Load Average too high (= 15....
I have FTD1010 and customer want to have dual ISP Active\Standby and LTE 3rd backup So he need high availability by using dual ISP contention Active and Standby, and in case both ISP are down he need 3rd LTE backup for selected Phones and Computers o...
We have several FPR1010 with Firepower Threat defense that is no longer possible to upgrade, due to that tasks are "Stuck" in the list.It is related to version 7.1.0.1-28 and 7.1.0-90We have tried to solve this with some expert commands about the bui...
We have Email alerts configured for Intrusion events.We also have a Correlation policy to send an email alert for Intrusion Events that drop.During our initial testing, we received the alerts. However, all subsequent testing produced no email alerts....
Hello All,We need to leak routes for specific audio cloud hosts from GRT to User vrf and reverse leak as well. But I couldn't see the destination leaked routes in GRT and networks aren't reachable.Could someone suggest some progressive comments or id...
Resolved! FTD security level 0
Hello Guys, I am new on the Cisco FPR 2130 device. Some questions below after hands-on pratices: 1. The default config contains inside and outside interfaces. But why do they both have security-level 0 ? Do I need to change it ? How ? (I didn't fi...
