How does a File Policy or IPS Policy get applied? When one has 50 rules in an ACP that are defining "allowed" traffic does one just apply the IPS and FIle policies to each "Allowed" rule ??? Would this not overburden the Firewall having to inspect o...
I noticed strange situation, I configured netflow exporter on the asa's and snmp server for SMC to get name of interfaces, and I can see that SMC sent snmp request to device >161/udp, but device response to 162/udp. Why does it happen?flow-export des...
I participated in the project of the topology configuration below. During the redundancy test, when the link between Router-A and WAN Accelerator-A is down, communication is impossible because FPR2130-A is in active state. Please switch the Active ...
Hi all, I am trying to do a deployment that needs to use a /23 subnet. And unless im missing something super simple, it seems that the DHCP server cant do any more than a /24. I have the interface set like below results in this error Looking at t...
Does anyone know of a way to export the NAT policies from FMC? Preferably with API but even a manual report would suffice. I've found some handy scripts on exporting ACP policies, but nothing on NAT.Thanks!Mike
Interested to hear if everyone is using FMCv in HA set up now that this option is available since 6.7? The second FMCv does need to be licensed - so are people purchasing the additional license for HA or going with the old school method of a single F...
Hi,I have configured a cisco asa (a virtual one) and there I have 5 internal networks (inside ASA) and then from this asa I have an interface calles MPLS which sends traffic (from and to) mpls sites. Now the question is this: I have configures NAT ru...
Hi,I'm trying to block social networking and pornography with URL Filtering to the users, but not sure why the URL Filtering isn't working. I have checked the order of the rules is correct. Has anyone encountered the same problem, I have attached the...
In my scenario I have to encrypt the traffic on Layer 2 & Layer 3. My thinking is MACsec on the core switch up until it hits the ASA, then configure an IPsec tunnel for that subnet to reach the remote site ASA. In theory, the architecture would be as...
Hello everyone! I have a question. When I configuring this NAT rule (ASA 5545-X, IOS 9.2(4)): (masked public IPv4 addresses) nat (inside,outside) source dynamic kspd-nets_inside granit-out-nat-host destination static granit-out-nets_outside granit-o...
I am using two Cisco Fire Power ASA 5515-X last two years. But suddenly from last 3 month one Firewall has been hanging automatically. Nothing does work then. After reboot manually it does work. but after sometime same issue occurred again. I use asa...
Is there any way to get detailed info of inserted SFP module in Cisco Firepower 1120? I can use FMC or CLI.
We have a situation where we need to encrypt the traffic on a Layer 2 VLAN. We have a Cisco Switch on each side but the fiber it runs over is leased and encryption (AES256 minimum) is required on a leased line. We have 2 ASA5505s that we could use ...
Hello all,Having tried to register the FMC to the Smart Licenses with the Token created in the software.cisco.com but failed. Tried a several testing or check up on the system, like below are working. Any idea?ping tools.cisco.comtelnet tools.cisco.c...
Hello,I have cisco firepower FPR-2130. I already have 2 ospf processes and need 1 more ospf process. Dose it support 3 ospf process?Thanks,Mark
