Hi,I have been trying to find where the setting is to limit the time that someone can use VPN using AnyConnect on a firepower 2110 appliance. For some reason i cannot find it or locate it and i want to disable the time limit. When someone connect wit...
I am looking to replace a FortiGate firewall which is currently working in transparent mode handling mutiple subnets with ASA 5515. Currently, I am testing transparent mode configuration on ASA 5505, and it will not forward any traffic that is not i...
Hello team I face problem to deploy Security Network Analytics Collector 7.4.1 on VMware - the process in loop with the error (screenshot attached). The SMC 7.4.1 on the same VMware installed fine. Thanks Michael
Team, I need to upgrade the ASA FirePOWER and FMC to the latest release. Please find the current running image details below Running FMC: 6.2.3 (build 113)! Running ASA 5525 - 6.1.0 PLease provide me the FMC version suggested to upgrade and also the...
We recently had a security audit of our network carried out. One of the minor points raised was that ping responses were received from our firewall's public IP address (i.e. the outside interface) and this may allow an attacker to enumerate our netw...
I have a pair of ASA 5585-x firewalls in HA mode - after a failover we are seeing VPN's comes becoming non-responsive up to 9hrs after failover. The investigation has indicated that the preshare key isn't be renegotiated when the lifetime counter tim...
So i have a network with topology that look like that. My palo alto firewalls are layer 3 device and in active-passive mode, while my Firepower NG-IPS are Layer 2 devices or transparent mode and in active-active mode. There's a scenario where lets s...
Hi, i want to reimage my HA FMC because there a problem on one of the FMC MonetDB.I search through the documentations, but i didnt find any documentation about reimage FMC in HA mode.So I want to know what is the procedure to reimage HA FMC? is it th...
please i need an advice on what cisco firewall that can be used in marine(offsore vessel)
Hi, we reconfigure our L2L VPN from crypto map to VTI with iBGP. We use DHCP server which is at a remote location. During the failover, BGP flapped and after some time some devices didnt get the IP address. I checked sh conn for the IP address of the...
Dear all, Recently I've faced an issue related to my License status Cisco Smart Software Manager on FMC red marked (image attached) and I want to de-register and register my license back there is any effect on Anyconnect VPN or not?
Can anybody share his/her experience with NAT/PAT running in ASA/FTD cluster if PAT is handled in centralized mode?This firewall is mostly used for inbound access, so almost all traffic goes through static NAT or static PAT, but we still have few dyn...
Hello I am trying to understand the report but I am not 100% sure how to read everything in Bold and underlined: I am testing and find this packet gets into the network but I do not want it to. So have run a packet capture on the FMC and get this rep...
Dear All seniors, I am facing a firepower firmware upgrade failure. The current version is 6.3. I would like to update to 6.4.0 but it's not working. Please advise and suggest me. Thank for your help. Best regards, Htun Naing Senior Support Enginee...
Hi all, We've migrated some locally managed ASAs to FMC using Firepower Migration Tool.This resulted in having the same object but with with different object names (e.g. with suffix 'FTD-Mig' appended at the end of object name), single ASA ACE that h...
