Hi Team, We've setup a temporary FMC on Google cloud to migrate from 5525 ASA to Firepower FTD, the configuration has been migrated successfully via the migration tool. However, we are unable to deploy the policies onto the FTD. Please see the atta...
Forum Posts
I've been asked to gather documentation that proves that automatic snort downloads that are scheduled are checked via FMC prior to being downloaded. They are asking to see if the hash is checked prior to installing the new .vrt file into FMC. Can any...
Hello So I am having some issues deploying NAT... My FPR1010 has a WAN (outside) IP 207.108.121.X which has a LAN (inside) 192.168.1.0.I have NAT on INSIDE for an Internal Network (connected to a SG550) which is 192.168.5.1-192.168.5.55The 192.168.1....
Hello, we are testing SAML authentication and we can't get certificate authentication to work.Currently, we are using AAA + Certificate authentication. we are on version 9.17(1) with an Anyconnect client on version 4.10.0208 There is an incompatibi...
So there were 2 Cisco ASA 5000 series boxes and their failover lan and state interfaces were connected via 2 C9300 switches. FW1>>FailoverLAN>>>>>SW1>>>>>Po1<<<<<<<<<<SW2<<<<<<FailoverLAN<<FW2FW1>>FailoverState>>>>>SW1>>>>>Po1<<<<<<<<<<SW2<<<<<<Fail...
The reachability of each interface can be done from either leg, still my asa failover is in failed state. Below is the show failover result from secondary leg (acting as active box)Failover OnFailover unit SecondaryFailover LAN Interface: failoverlan...
Hi All, Do you know if there is a way to redistribute EIGRP into BGP in Firepower FTD?I configured EIGRP, BGP and redist BGP into EIGRP.But couldn't find a way to redist EIGRP into BGP. Regards, Umut Yasar
Hi sir I use an IP 134.251.87.253 134.251.87.254 as a server IPs behind the firewall ASA.Both servers' gateway IP is 134.251.87.237, which is a port IP on the ASA. I can ping 134.251.87.253 134.251.87.254 from the ASA.But from other subnets, I can o...
Hello, I have an ASA5506-X that is currently loaded with a Firepower. I would like to have only one ASA running on it and would like to upload the IMAGE to it. unfortunately no command works for me, because always error messages are displayed.If I wa...
Dear community, Am facing an issue were a user is in the Domain Users group, a group were i stopped YouTube and media streaming, but I found a User to be able to access and use YouTube. Checked the user and is in the same group as the other Domain ...
Hello,I use FMC 7.0.1 and I want to have SSL policy with source country.I am trying to decrypt port 443. But SSL policy with source country doesn't work and traffic matches with SSL default policy.When I change same rule source with IP address it wor...
Hi All, Is there a way where we can allow traffic from outside interface with security-level 0 to Inside or DMZ interface with higher security-level apart from ACLs ? I mean without any acl entry can we allow traffic?Is there any other way traffic ...
ASA 5506-X Very basic initial config.Purpose is to firewall my server lab from my HOME-NET and the Internet. ASA is on my HOME-NET 192.168.82.0.PC is 192.168.82.99.ASA HOME-NET (outside) interface is 192.168.82.100. I am able to ASDM to the ASA on 19...
i 'Im currently setting up a anyconnect vpn using multi certificate, and finding that the CRL or OCSP is not working. Im using a yubikey with the personal certificate on it and a device certificate form a laptop, both of these are signed by our own ...
Hi I am a bit confused here on the topic of IRB. According to the documentation on the Cisco FTD, is "redundant interface" a feature of IRB or "EtherChannel interface" ? Furthermore, is IRB is only acheivable in routed mode? https://www.cisco.com/c...
