Hi, I am a beginer for Cisco Anyconnect, and I'd like to know about compatibility. I found the compatibility of Windows OS, MacOS, Linux, and Anyconnect at the address below. https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anycon...
Hello, we scan a switch with Qualys for vulnerability and found some issue as below. Anyone can tell what it does mean and provide some suggestion to fix it? Thank you "OpenSSH is a set of computer programs providing encrypted communication sessions...
Hi community, I'm looking for some guidance... We're relatively new to FTD devices and in the progress of upgrading from legacy ASA 5008x's that were managed independently. We have deployed an FMCv and are managing a new HA instance consisting of 2 x...
For an ASA 5510 on 6.3(3), how do I get: terminal pager 24 To stick? Somehow on one of our older ASA's no matter what I do, it always pager disabled so it just scrolls without stopping. I need it to stop ever 24 lines or 50 lines or whatever I se...
Hello I know this question is questioned a lot, but i need help to understand the steps and configuration. FMC ----> FTD-HQ -----> WAN ------> FTD-RemoteI need to understand the procedure.1--> FMC_REAL_IP ----> FMC_NAT2--> i need to configure mgmt in...
Hi there,I had a few questions here regarding the Cisco FMC. 1. Is there a means for exporting the firewall rules set and traffic logs?2. Is there a built in policy optimizer that we can leverage to remove redundant and unused policies?3. Is there an...
Hi all, How can I block apk file and android software update in ASA 5525x firesight? I have tried various ways to block them but cannot success yet.Please help me to solve that.
We have a DMZ security zone on FTD and it has multiple VLANs / sub-interfaces, I found out every ACP created actually are duplicated to all VLANs / sub-interfaces, for example, my intention is:Source -> DMZ -> VLAN-A/Sub-Interface-A -> App-ASource ->...
Hi there, I had a question regarding real time monitoring on the FMC.Does the FMC have the ability to identify live sessions?Can we view info about Ingress/Egress zones, number of packets/bytes and interfaces etc... ?This would greatly help us to dee...
HI We are using CyberArk PSM-SSH to SSH to ASA. The PSM-SSH application only supports diffie-hellman-group15-sha512. how do I upgrade the Key exchange to diffie-hellman-group15-sha512 (or higher) on an ASA the Current supported Key exchange gr...
Hello,I've been reading through Cisco's site to site documentation and wanted to confirm there's no possible way for a site to site vpn to have both tunnels active? Seems you can only have active/passive. FMC 7.0 using FTD 2100 series. Thanks in adva...
Hello So on an inside server (192.168.5.42) I am running an NGINX Web-Server which absolutely needs to be on Port 80 and 443. My FPR1010 has, by default, https access via 443, so when I connect to x.x.x.182 (WAN) (which connects to 192.168.5.42) on h...
Dear Team , I have found this error in one FMC SETUP Deployment Cancelled due to Firepower Mangement Center restart. Retry Deployment. Only normal changes we have made in FMC . WE have raised case with cisco they did troubleshoot issue. And Last WE f...
Hello, I have a customer with a SFR module on their ASA 5525. After the latest VDB update (361) they ran out of memory, resulting in traffic interruption. This is the warning they see in their FMC: Configuration Memory Allocation - Resource utilizati...
Hi everyone,I'm trying to figure out if it's possible to provide the blocking page when a virus/malware is blocked, from the tests I've carried out it would seem not, the blocking page is displayed only with the URL filtering feature.So I wanted to a...
