Hello.On an enterprise ASA There exists at least 1 active outside int with a public IP address, that has zero restrictions on its attached ACL. I expect this interface is not advertised at all, but still, is this normal (if not best) security practic...
Forum Posts
I'm new to the Firepower FR-1010. What is the best way to monitor/analyze the inbound traffic going outbound to the internet. I would like to start explicitly defining the outbound traffic that can leave, but need to know what is being used so I can ...
Hello,For some time now we have been experiencing an issue on the network for a while. I haven't been able to figure it out.When downloading a large file (usually 500 mb or higher) the download starts strong, then slows down, coming to a complete sto...
I am managing a Cisco FPR-1120 with FMC, not using the data interface, but through the Management Interface then recently for some unknown reason, I am no longer able to ssh to the device. Management through the FMC still works fine, and can ping it...
Hi,I have one question about some licences.Specifically these ones:R-MGMT3X-N-K9L-MGMT3X-PI-BASEL-MGMT3X-2K-K9R-PI36-SW-K9L-MGMT3X-3K-K9L-MGMT3X-4K-K9My question is if these licences are portable or not.For example: I'm buying new server, does I need...
I am trying to setup a firewall in Packet Tracer but all connections leading out of it are red. All the videos out there show the connection turn yellow then to green but they remain red for me. I am new to this, I don't understand what I'm doing wro...
Hello Cisco Community,I am trying to allow port 80 through a ASA 5506 firewall from my DMZ to a INTERNAL zone for a HTTP server. I am having a problem with the access list, and have encountered a strange problem. The ip address of my HTTP server is 1...
Resolved! ASDM authenticate fails now
Hello, I need some help getting my ASDM working again.For some reason when I try used ASDM I can't get pass the authenticate part. When I try to ssh to the same firewall using the same username and password worked fine no issue.ASDM version 712-102 A...
We've had LDAP integration into our AD for many years for authentication into the FMC and FTD. However, we're trying to setup a rule, so that someone in our finance department is the only one who can get access to a particular website. When I configu...
Resolved! FP sizing for 2000 active connections
I have a question about FP sizing.For a site that has approximately 2000 active connections through an ASA5506x (not running any firepower just classic ASA, output of "show conn") would a FP1010 be powerful enough to run all three FTD licenses?
We have a Cisco FirePower FTD 2140. When I go to MONITOR-EVENTS, I'd like to see the "ORIGINAL CLIENT COUNTRY AND CONTINENT" within the filtered session. Presently, it is blank, as if it does not know or there is a setting missing somewhere to allo...
Hello,I have successfully register FTD to remote FMC.1-FMC ---> FTD--->NATIP_FMC and PORT 8305 ----> REMOTE FTD-PUBLIC IPCreated ACL only access from FTD-RemoteCreated VPN/S2S between both FTD.Now my problem is how to convert the mgmt interface in pr...
Hi All,I have upgrade my FMC from 7.0.4 to 7.3.0 and right after the upgrade completes i get this Smart License Monitor Error and when i tried syncing my FMC to the license portal it just synchs properly and i am just wondering what make this error w...
My system uses a server as a PDC, at the user side I set the DNS for the computer as the IP of the PDC, sometimes I find that my firewall device does not detect which website is being accessed by any computer. internally, I only found out that my ser...
I can't think of a reason why the Gateway firewall would be logging Inside to Inside as shown in the below. Any ideas why I would be seeing these logs for same subnet traffic flows on a gateway firewall? In screenshot you cant really see but it does ...
