We have Email alerts configured for Intrusion events.We also have a Correlation policy to send an email alert for Intrusion Events that drop.During our initial testing, we received the alerts. However, all subsequent testing produced no email alerts....
Forum Posts
Hello All,We need to leak routes for specific audio cloud hosts from GRT to User vrf and reverse leak as well. But I couldn't see the destination leaked routes in GRT and networks aren't reachable.Could someone suggest some progressive comments or id...
Resolved! FTD security level 0
Hello Guys, I am new on the Cisco FPR 2130 device. Some questions below after hands-on pratices: 1. The default config contains inside and outside interfaces. But why do they both have security-level 0 ? Do I need to change it ? How ? (I didn't fi...
Am I missing something? Is there really no way to enable/disable specific rules in an Access Control Policy with FDM like with FMC or on the ASA. I have searched online and can not find anything. How is that even possible? I'm finding FDM is almost v...
Hello everyone, I can not connect to the internet or ping the gateway or the outside interface from my host in the inside network. These are my settings: :: Serial Number: xxx: Hardware: ASA5510, 1024 MB RAM, CPU Pentium 4 Celeron 1599 MHz:ASA Versi...
Hello. Simple quick question...Inside the LAN I'm installing a new vendor's Cisco box that has a preconfigured VPN to a server on the www. All communication will originate inside this new box that connects to a switch that connects to the inside inte...
Our Firepower Threat Defense SNORT engine is triggering rules that don't match the actual traffic.For example, rule 1:16540:18 references CVE-2010-0477 which has the description: The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does n...
Resolved! FTD - IPSec failed
Hi everybody, I have an FTD with FMC that must have a VPN tunnel IPSec with a router. I have configured the FTD following all the instructions but I receive the message log error "Failed to authenticate the IKE SA". Reading the debug messages I found...
Hi Cisco SMEs,my problems has been raised problem has been raised before, sometime ago in 2017 see this Community post on "Defining custom PAM or protocol for ZBF", and here "IP Port map custom protocol in IOS XE".Both of these only identified that t...
Hi All,I am facing an issue which I am not able to trace the destination ip and port of the whatsapp application in order to open it on the firewall?any advise ?Thanks
Resolved! Old NAT ASA Config Question
Hello Network Gurus,Just trying to figure out what is this NAT config for?global (outside) 1 interfacenat (inside) 1 0.0.0.0 0.0.0.0static (inside,outside) 10.17.1.5 10.17.1.5 netmask 255.255.255.255Saw this access list command as well:access-group O...
I'm trying to set up a transparent mode FTD on the FMC to allow L2 multicast IEC61850 goose packets with a VLAN tag to pass between inside and outside sub-interfaces.1. I created a BVI to bind inside and outside sub-interfaces but have no IP address....
we have three pairs of FTD 4100 series managed by an FMC 1600, yesterday we got an error on one of the FTD that says: Policy "policy name" has been altered since "timestamp". Retry deployment we didn't deployed anything on this particular device....
Resolved! FMCv300 Resources
Hello community,currently we have started with implementation of FMCv in our network.Since we need to manage more than 25 senors I suppose there is no other option than to go to FMCv300.My question is, is it possible to modify/ downsize resources req...
Hi All,I have a cisco FPR 2130 i have connected eth1/13 and eth1/14 with 10G LR SFPs with a device called IXIA its a point to point connectivity. On IXIA i have an SFP called (Ixia, QSFP+ 40GBASE-PLR4 40GE pluggable optical transceiver, SMF (singlemo...
