Having issues with rule conflicts and traffic behavior, so I created a new AC policy with default posture to deny all traffic, but when you examine the new policy there is no default deny rule. Where is this rule seen so I can confirm its existence?O...
Forum Posts
Resolved! Cisco FTD - "No Rules Active" but active
Hello, I'm still getting used to the FTD and have been for the better part of this year. Unfortunately, I have suffered so many things that TAC could not help with because they're in all probability bugs (some of which, very clearly bugs.) I already ...
Hello Everyone,We are trying to get a SQL cluster node to communicate on UDP 3343 from a host attached to our "DMZ" interface, to a host on our Inside interface. Packet tracer is saying the packet is dropped due to an ACL, but ive cleaned up our ACLs...
Hi Guys,I am trying to allow internet with NAT to one computer in our network but I guess i miss something.CISCO ASA FW - p1/WAN (can ping 8.8.8.8)CISCO ASA FW - p2/10.5.100.254SW - p25 (defined as access port VLAN 100 - 10.5.100.1)to the same sw, ma...
Is there a Letter of Volatility (LOV) for the 3524 family of switches?
- FYI : https://www.cisco.com/c/en/us/support/docs/field-notices/725/fn72501.html >...For affected versions of Firepower software, automatic software downloads, Snort Rule Updates (SRUs), Vulnerability Database (VDB) updates...
Hi,i would like to ask about ikev2 proposal encryption. If we are using we encryption in IKEv2 proposal but i will use strong encryption on IPSec, can IKE proposal compromise ? Phase 1 will compromise ?If Ike proposal is compromise, what kind of data...
Is there a way to send connection events and IPS logs from the FMC instead of configuring each FTD to send to a SIEM?
Dear all,I would like to ask some help that i want to do deny policy at cisco ASA 5515-X base on country. i think it is layer 4 firewall, it is not possible, but i would like to make sure. Anyone can help for it? Thanks much.
FTD IPS is blocking a legitimate URL as web application BitTorrent. where is the best place to put an exception to allow this through. Thanks
Resolved! rate limit
Hi,What does 'rate limit" mean & do? E.G in QOSI read it in Thanks
I would like to know if we can use same username and password to connect VPN in different VM's or device.If there is any let me know the settings and configurations to be done
We are trying to enable SSH access via Platform Settings which is being pushed to 6.6.4 FTD and we are able to login with local accounts but not external accounts. We have an LDAP External Authentication Object defined and use an LDAP base filter to ...
Hello everybody, i need to know if is possible to monitor via snmp the SFR modules of an asa with firepower services pair.i've configured snmp both on asa and fmc but i'm not able to monitor the SFR modules, what can i do to fix(if it possibile)?asa ...
Resolved! DMZ & Internet Switches
DearsPls refer to the attached diagram, i don't have sperate internet switches so planning to connect ISP internet links on the DMZ switch with secure configuration, i m planning to create a Private vlan and port types community in which port 1-6 wil...
