I have a FMCv currently in vCenter and speced with 8vCPU and 32GB ram. I want to move to FMCv300. There are two licenses related to FMCv300: SF-FMC-VMW-25-300 and SF-FMC-VMW-300-K9. I assume I would need the “SF-FMC-VMW-25-300” in my case to move my ...
What would be the difference between an allow rule with no IPS policy selected and a trust rule? TIA
I have asked for help before on this module and did not get anywhere, but here goes again. I am looking to re-image the AP module due to the fact it is not accessible through CLI or WEB app. I would appreciate any assistance on getting the WIFI modul...
Hello Folks, I have 2 FP-2210 in HA managed by FMC and I noticed recently that one of the Firewalls has no valid SSH credentials, based on the Keepass, I want to recover that specific Firewall CLI password without reboot so I won't bother productio...
Hi,I have created a basic scenario on GNS3 with ASAv and a PC but there I am troubling in ping issue from PC to ASAv or vice-versa. I am attaching ASAv configuration hostname ciscoasaenable password $sha512$5000$weTQEksgaEbyw8U3MT2a9A==$kzi7RjydjZXE...
Hi,I confuse how to work NTP traffic. My network device need NTP from window server. the firewall is between my network device and Window server .I enable NTP server service on window.So i would like to know If i open NTP port 123 on firewall for the...
Hi Guys, I have an ISRg3 WAN running IOS PKI & SCEP with flexVPN which is working well. I have tested the Hub CA with both SCEP 'Grant Auto' and 'Terminal Manual' Spoke enrolment which works great. However, I'm after a halfway house in an ideal world...
Hi, I am getting the below log in my mail server while sending mails. Jun 25 15:52:39 xxxxxxx postfix/smtpd[12595]: disconnect from localhost[127.0.0.1]Jun 25 15:52:39 xxxxxxx postfix/qmgr[12566]: 32204DF9FE: from=<root@-----.org>, size=602, nrcp...
i have the firepower 1120 and in dmz zone my mail server exists. the mailserver works ok, but when i try to sending mail on specific mail address i receive socket error 10053 and 10054 , i found somewhere on internet i must disable esmtp inspection, ...
I am just trying to plan for upgrading FMC/FTD to Snort3. Several features included in the Snort2 I can not find anymore under the Snort3 configuration pages. Just want to check here in case I missed certain options: 1. There is no "Global Rule Threa...
Hi I've been trying to configure the server 2019 native VPN service but when I go to connect from the windows 10 client it always gives me an error. What do I have to configure through the FDM to allow the win 10 connection to get through the firepow...
II have a 5516x that ASDM Hangs at 28% when trying to authenticate to firepower. If I unplug the mgmt cable I can manage the firewall but not Firepower. There are no errors in the java console. I m running ASA9.16.3 ASDM 7181-152 FPWR 7.0.2. I h...
Hi All,We have an FMC which has internet access but we manage it over an MPLS connection. All the FTDs managed by this FMC are connected with the MPLS connection. The Mgmt plane is configured with the IPs learnt via the same MPLS.Now we have a new re...
Hello Experts @balaji.bandi I want to know what's the default idle timeout on Cisco ASA AnyConnect? and how to change it.Also, I want to ensure that AnyConnect will disconnect every 10 hours. The goal is to make sure every user reauthenticates after...
I just finished the packet tracer activity, 'configure IOS intrusion prevention system using CLI'. Now I'd like to create a custom signature that detects a certain piece of malware's behaviour like its port scanning pattern, using a signature engine,...
