Getting the following error after I removed an unused network object from an object group on my ASA. Why am I getting this error? But I have no idea how they can be related? Yes, I understand they overlap, but it never was an issue before? Should I b...
Forum Posts
Im having trouble with one user working and saving a word document to our file server over VPN. Firepower keeps blocking it as malware, but looking at the file there is no obvious signs of malware. Firepower doesnt appear to give me any reason why it...
Hi all, I have two ASA FirePower-2140 in Active/Standby Configuration. I need to configure one IP addres for management in FirePower-1 and other distinct IP address for management in FirePower-2 because I need to access both devices independently via...
Hello, I'm planning for a new FTD setup where the outside interface on the FTD connects with an etherchannel to a switchstack. On the same outside subnet there will be two ASR 1001 routers, each connected to different ISP:s. Now on the FTD I want to...
hi,I need to decrease number of fragments from default 24 to 1 one some ASA interfaces. show fragment command shows there are fragments comeing to that interface. How can I find source of fragments? Can I capture packets usimg ip packet offset or som...
Can we make Etherchannels to increase the bandwidth towards core switch from FPR 1120 or 2120? We have 1 GBPS ports only at firewall side and from the core switch to FPR, we required 2 GBPS speed to allow routing via firewall. The firewalls will be c...
Hi All ,As Picture below. I try to failover ASA from Primary to Secondary and I monitor in ASDM data in graph lost while failover. I would like to know this situation is normal behavior of ASA or not . I'm running ASA Version 9.16(2)14 and ASDM 7.1...
Why does a visit to https://www.cisco-servicefinder.com/WarrantyFinder.aspx result in a certificate error due to CN being "anticounterfeit.cisco.com"?Certificate appears to be this one https://crt.sh/?id=9034231599 and that sure isn't for a www.cisco...
Hello all, I am trying to define FTD1150 using Firepower Device Manager and I want to permit deivces on any of my subnets with the same 4th octet at the host-portion of the address, so for example matching any from 10.1.1.250/24, 10.1.2.250/24, 10.1....
How to reset FMC to factory defaults?
Hi,Please walk me through how to block websites such as Facebook, YouTube or any adult contents. I have firewall 1100. Thanks Ammar
Hi All; May I know, What is the procedure for migrating the old firepower model to the new firepower model? scenario: Firepower ASA5506X managed by FMC needs to migrate to 1010 or another model
HI,We have been trying to make this work and so far not successful.We can get the metadata from the SAML group , but when SAML idp authenticates, the vpn anyconnect client comes back to the login window with a login failed. on the Debug we see no pro...
Resolved! Porting config - FMC to FortiVM
Hi,From what I've gathered there's approximately no way of exporting the config of the FMC other than the ACLs which I got using the below option:http://archive.dependencyhell.net/2017-07-09-dumping-firepower-acp/So since there's no easy way of getti...
Hi, I want to know if any or both of the Failover or state link between firewall failed which is required for HA configuration, which firewall will be active, How we can come to know that HA link between firewalls goes break to take the corrective ac...
