Network Security

Resolved! For Re-image and Install new version ASA Firepower module

I was watching that in the list of downloads for software of asa firepower for 5508 devices have 3 files. so I read only the boot image and the system image that would be the following files: ASA FirePOWER module boot imageASA FirePOWER module instal...

Remove "inside" interface in ASA Context mode

hi,i got several "inside" interface that i needed to clean up in a multiple/context mode ASA.it's been years since i did this and just would like to confirm my thoughts.do i just remove or negate the subinterface under the 'system' context and all 'n...

Resolved! FMC Managing a cluster of Firewalls

Hi All, Looking for a little direction if possible. We have four Firepower firewalls along an edge at different locations sharing an ACL policy and NAT policy on the FMC. So we make a change in the policy, it is pushed to all four Firewalls. However,...

Cisco NGFW 2210 - VPN Client Issue

Looking for a solution to my issue: I have a Cisco NGFW 2110 running v6.6.1 and the VPN client had been working. Short story is I blew away the VPN config because users complained they had no access to the back-end resources after connecting. Now it'...

NAT&PAT

hello guys,i'm working on a NAT&PAT topology and the ping from PCs won't work (worked once) while i can ping from the server to the PCsm dropping here the file if anyone can help

ASA: Not getting Internet Access on the Server.

Hi All, I'm currently having issue where the System Admin is having difficulty in getting internet access. A rule was created on the Cisco ASA to allow internet access to the Server but the System Admin is not getting internet access but when we do t...

Resolved! ASA 5508 - Block IP addresses doing Proxy scans

Over the past several months, I've noticed a lot of login attempts from Foreign IP addresses trying to log into my Exchange server. The server is fully patched but I would like to block these IP's at the firewall so that they simply can't try the lo...

Change clock in ISE without impacting existing device admin via TACACS

My ISE cube is made up of two nodes. I just enabled device admin to manage a few switches/routers via TACACS and it is working as expected. However, I noticed the system clock in ISE is different to the one of the routers/switches and to that of the ...

Network Admission Control (NAC) vs Network Access Control (NAC)

Hi two terms is same? Network Admission Control (NAC) vs Network Access Control (NAC)Thanks

Does a Cisco ASA's statistics clear after a device reload?

I believe that the statistics on the Cisco ASA are reset after a reload takes place but I was not able to find Cisco documentation to confirm this. Specifically looking at the "show vpn-sessiondb summary" statistics. Would anyone be able to confirm m...

FDM (v6.6) Routing + VPN ssues

I have a standalone NGFW 2110 with AnyConnect configured with there are several issues going on, and not sure if one is impacting the other. 1) Can't ping e1.7subif or e1/8 subif from the fw. However, e1/3 subif ping just fine. 2) When clients conne...

Resolved! Firepower module ASA planing upgrade

I am planing upgrade ASA sfr module 6.1.0 to 6.7.0.The ASA version is 9.6(2). During the planning, the following questions arose: Re-image and install the new version is different to perform an upgrade in ASA sfr module?In case a this re-image and in...

FMCv License Part Number

Hello, I am running FMCv for the first time on Hyper-V using the Microsoft Azure VM. The web interface prompted me to choose between registering the device with Cisco Smart License Manager or Start a 90-Day trial. I will select the 90-Day trial for n...

Resolved! ISE not confirmed locally previous successful machine authentication

I see the logs like below on ISE .I turn on machine authentication, and AD is correctly working with ISE using PEAP.however, as shown, the machine authentication can not be processed.so the attribute "Network access> WasMahineAuthenticated " is meani...

Port channel problem on FDM 7.0.0-94 version

On firepower 1140, I can't setup port-channel between sfp ports. FDM version was 6.4.0 I upgraded it to 7.0.0-94. On both versions it doesn't work.How I can solve it. I need very urgent solution on that.Thank you for your support

Network Security

Forum Posts

Resolved! For Re-image and Install new version ASA Firepower module

Remove "inside" interface in ASA Context mode

Resolved! FMC Managing a cluster of Firewalls

Cisco NGFW 2210 - VPN Client Issue

NAT&PAT

ASA: Not getting Internet Access on the Server.

Resolved! ASA 5508 - Block IP addresses doing Proxy scans

Change clock in ISE without impacting existing device admin via TACACS

Network Admission Control (NAC) vs Network Access Control (NAC)

Does a Cisco ASA's statistics clear after a device reload?

FDM (v6.6) Routing + VPN ssues

Resolved! Firepower module ASA planing upgrade

FMCv License Part Number

Resolved! ISE not confirmed locally previous successful machine authentication

Port channel problem on FDM 7.0.0-94 version

Congratulations to the July 2023 Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Why are NFS connections centralized in ASA/FTD cluster?

思科ASA防火墙型号ASA5555-X版本升级和ADSM的客户端管理软件升级版本可以确定一下吗，各位大佬

Cisco Secure Workload - Rehoming Agents from On-Prem to SaaS

Application Filtering for Office365

"Failed" successful CSM policy deployments to single ASA context

Is there a way to migrate from FMC to cdFMC?

switching a Firepower 1120 failover active/standby into multi context

FTD blocking connection to OpenDNS

How to delete persistent debug on FTD

Unable to SSH into virtual FMC