Hi there,Is Cisco Firepower have a Database for malware signature?When i check TECSEC-2599.pdf p77, the information is: FTD will first calculation the sha, and than send to FMC and FMC will check the Reputation from AMP Cloud.But i got another inform...
Hi All, I configured anyconnect vpn in ASA and its working ok. I enabled ASDM access in inside interface (10.10.50.254). After connecting to VPN, i tried to ping and connect to ASDM on 10.10.50.254 but its not working and i get "routing failed to loc...
Hello everybody, our customer is using the FMCv rel. 7.2.5.1 and many FTDs.After de-register/re-register the FMC in the Smart Software Manger because another error message four devices (7.0.1 & 7.0.5) fourdevices show the error: Threat Data Updates o...
I have a Cisco FTD 2140 Secure Firewall that I am trying to build a route based IPSEC tunnel using VTI's. The vendor needs my proxy ID or encryption domain to be presented as a public IP address. So my WAN IP is obviously public but my internal netwo...
We have FTD devices with ASA image in production which managed by FMC and Also we are managing firewall through ASDM. so now we are removing the FMC from production and want to manage the FTD devices locally. so is there any impact if the firewall is...
With the massive number of attacks on AnyConnect and other VPN's, I've begun looking into how to further remediate these login attempts. We have MFA in place.I'm having trouble understanding how to associate a remediation with a correlation policy.Ou...
Hellocould you please share the solution for showing dropped packet from internet to inside lan ? i have FTD 4100 series managed by fmc I want to see output from cli or fmc related to nat transactions packet(dropped and passed) both.
Hi, I'm looking at deploying BGP on an FTD Active/Standby HA pair (FTDs are 4215 hardware running 7.2) to enable routes to be controlled by neighbouring routers rather than relying on 100s of static routes on the FTDs. I was wondering if anyone could...
Hello, we recently had our cert for our VPN expire without notification via alert message. I've done some research in the FMC but can't find anything that monitors certificate expiration dates. A google search points toward REST API's of course but t...
Is it possible to run Radius with Cert and Radius only on the same interface. I have different profiles for the two. but they share the same tcp port. Need to do a POC, and it would be much easier to have user login with just Radius, not Radius and c...
Hi Dears,in our company we have FMC\FTD but the logs (connection event) were saved for almost 1 week back only.i have been checked the limitation as the below tableConnection eventsSecurity Intelligence events50 million (FMC Virtual, FMC750) 100 mill...
HiHow do we configure AAA for the FTD in chassis mode managed via FMC?I can't seem to find any information on this? The FXOS cli doesn't appear to permit you to make any changes.But i don't see anywhere to create a Chassis AAA policy. AAA for the Ins...
object network obj-10.40.40.1 nat (inside,switch) static 172.10.10.5 What does the above NAT mean? what is the original source, original destination and the translated source?
FP has routed sub-interfaces as shown in diagram. HostA is able to ping HostB, and vice-versa. FP Vlan20 responds to ping request from HostA. FP Vlan30 responds to ping request from HostB. All works with the following exception, FP Vlan30 does not re...
HelloWe have a Firepower 1120 device. With IPS is it possible to monitor file copying over Windows RDP?If so, can it correlate the user session to what files are copied?Thanks
