Network Security

Hello, We have recently upgraded our FMC from 6.6.5 to 7.0.4. We then upgraded the SFRs (ASA 5516-X) from 6.6.5 to 7.0.4. The SFR upgrades appeared to complete fine and showed as green and on version 7.0.4 in the FMC. However, we received the below w...

Hi all,   Currently running 6.2.3.1 on a few 2110.   Seeing this in the logs. Mar 17 16:26:18 fp2110 : %ASA-3-199015: Mar 17 16:26:19 fp2110 FPRM: <<%%FPRM-3-APPINSTANCE_NOT_RESPONDING>> [F0190][major][appinstance-not-responding][sec-svc/slot-1/app-i...

Hi All On ASA 5516 with 6.2.3.6 is there any limit on creating network object or network groups and assigning them to security policies? We need to add, to an existing block rule,  more than 950 IP addresses ( as hosts) and then assign them to a poli...

Hi guys,I have FCM with 2 clusters of FPR (active-standby) you can see on the screen:I am not able to connect with SSH.  I Tried connecting with SSH (putty) to all four IP addresses: (192.168.5.38, 192.168.5.34, 192.168.5.37, 192.168.5.33), but witho...

Hi,I have DOT1X authentication configured on all switch ports (Both data & voice VLAN). I also have Cisco IP phones.My requirement is: to allow Cisco IP phones without DOT1X authentication. I have tried using "authentication host-mode single-host", b...

How can I generate a csr request for a web certificate? I could not find where it is generated

Hi All,Can someone tell me why you cannot set up a NAT rule on the ASAs with the destination address being a FQDN?I want to allow some internal addresses to bypass our proxy to go to an external address and thought this would be the best way to do it...

Have an FTD1010 that's been factory reset (currently not registered with an FMC), can get to the FDM instead.Its currently running version 6.4 and I need to get to 7.3. Hence I have opted to use the reimage guide found here as it means I can go direc...

I'm trying to get FTD 7.1.0-61 (with FMC 7.1.0-61) configured in GNS3 (ver 2.2.37) but interfaces are down (no packets received). Ive set the interface status in Health policy to disabled. The outside interface is set to DHCP but not receiving an ip ...

Hello.My web session keeps expiring in one firepower I manage.When I connect to the firepower web, the session expires in 1~3 minutes irregularly.In some cases, you cannot log in because your session has expired.The browser session timeout is set to ...

Hello, I'm trying to deploy a FlexConfig for NetFlow export to my FTD, which is failing. I'm using FlowDestination text object override on my device because the interface name does not match the default "Inside." I would like to avoid creating copies...