We recently had a security audit of our network carried out. One of the minor points raised was that ping responses were received from our firewall's public IP address (i.e. the outside interface) and this may allow an attacker to enumerate our netw...
Forum Posts
I have a pair of ASA 5585-x firewalls in HA mode - after a failover we are seeing VPN's comes becoming non-responsive up to 9hrs after failover. The investigation has indicated that the preshare key isn't be renegotiated when the lifetime counter tim...
So i have a network with topology that look like that. My palo alto firewalls are layer 3 device and in active-passive mode, while my Firepower NG-IPS are Layer 2 devices or transparent mode and in active-active mode. There's a scenario where lets s...
Hi, i want to reimage my HA FMC because there a problem on one of the FMC MonetDB.I search through the documentations, but i didnt find any documentation about reimage FMC in HA mode.So I want to know what is the procedure to reimage HA FMC? is it th...
please i need an advice on what cisco firewall that can be used in marine(offsore vessel)
Resolved! ASA VTI with BGP issue
Hi, we reconfigure our L2L VPN from crypto map to VTI with iBGP. We use DHCP server which is at a remote location. During the failover, BGP flapped and after some time some devices didnt get the IP address. I checked sh conn for the IP address of the...
Resolved! Cisco FMC De-registration License
Dear all, Recently I've faced an issue related to my License status Cisco Smart Software Manager on FMC red marked (image attached) and I want to de-register and register my license back there is any effect on Anyconnect VPN or not?
Can anybody share his/her experience with NAT/PAT running in ASA/FTD cluster if PAT is handled in centralized mode?This firewall is mostly used for inbound access, so almost all traffic goes through static NAT or static PAT, but we still have few dyn...
Hello I am trying to understand the report but I am not 100% sure how to read everything in Bold and underlined: I am testing and find this packet gets into the network but I do not want it to. So have run a packet capture on the FMC and get this rep...
Dear All seniors, I am facing a firepower firmware upgrade failure. The current version is 6.3. I would like to update to 6.4.0 but it's not working. Please advise and suggest me. Thank for your help. Best regards, Htun Naing Senior Support Enginee...
Hi all, We've migrated some locally managed ASAs to FMC using Firepower Migration Tool.This resulted in having the same object but with with different object names (e.g. with suffix 'FTD-Mig' appended at the end of object name), single ASA ACE that h...
how to add two static route in firepower threat defense dual isp for example i have two subnet inside-zoneA> 10.0.1.1 255.255.255.0B> 10.0.2.1 255.255.255.0 Two ispoutside zone ISP1 iSP2i need to A subnet going traffic isp1 nat and subnet B going t...
I have a Cisco FMCv in the lab running 7.2.1. It is configured to automatically download the geolocation update on Friday @ 11pm. However, it hasn't updated for the last couple of weeks. I have manually downloaded and uploaded the latest Geolocati...
Hi,Seems the "ipv6 address dhcp default" command is not supported on my ASA 5520.How do I get an IPv6 global address (as well as ::/0 default route) from my ISP?Cisco Adaptive Security Appliance Software Version 9.1(7)32Device Manager Version 7.3(1)1...
Hello Dears i am looking for solution like FSSO in fortigate to do it on FTD Box managed by FMC. Best
| User | Count |
|---|---|
| 10 | |
| 7 | |
| 5 | |
| 2 | |
| 1 |
