I have several sites connected via L2L tunnels with both ipv4 and ipv6 active but all traffic come through site1. for ipv4 I do object network obj_anysubnet 0.0.0.0 0.0.0.0object network obj_any6subnet ::/0 serverFakeIPSite1 192.168.100.1serverPubIPS...
Hi All, I am looking for information around maximum supported rules/Policies on a Cisco 9300 Firepower appliance (with SM 40).Couldn't find this information in the documents. please help point me to link where this information is available. #Firepowe...
ACL logic, please confirm.On an ASA 5525..."access-list inside_in extended permit tcp host 172.16.0.2 host 1.1.1.1 eq 2222"Is the following a true statement?... "Host 172.16.0.2 using source port 5678 and destination port 2222 will be able to send, a...
Hi,What is PID when we try to integrate with Cisco API's to auto download Broadworks patches or binaries?Regards,
Hi Everyone,On ASA which is running RA VPN.Why we will use this command route inside 0.0.0.0 0.0.0.0 x.x.x.x tunneled?RegardsMahesh
Hi, I and team are trying to consume the Cisco API's to auto download Braodworks patches or binaries. It seems the Product ID is needed to successfully integrate with Cisco API's. Can you please let me know where can I find the Product ID? Reagrds,
Hi All,We are planning to manage the FTD over internet facing interface via FMC. May i know the risks involved in managing the FTD over internet facing interface please.Interface will carry both Internet traffic and management traffic.Regards,Sanjay ...
Hello Guys, I have a very weird issue, I need to deploy 2 fpr1010 but I can't do it because I don't know what this device is doing.I tried several things but no luck. I try to manage it locally no cloud management is applied since no net. My connec...
Hi All,I have few pairs of the NGFW and have recently change the passwords on them via the "configure user password admin" command..does anyone how to save the config/changes via CLI... or is auto saved? models are 2140 2130 2120 running 7.0.4Thank ...
Hello,a vulnerability test detected "TCP Sequence Number Approximation Based Denial of Service" vulnerability (CVE-2004-0230) on a ASA 5506.The ASA should be running on 9.8(2).How do I find when (what firmware version) Cisco fixed the vulnerability?
UPDATE: I finally got it registered after deleting the pending manager in FTD and did a reboot of FTD as well...The only conclusion I got is I might have entered reg key incorrectly... ============ It is first time I am trying to register a FTD to CD...
Hi - I have a 5508 in my home lab with a firepower SFR - I recently upgraded it to version 7.0.4 - (had to do a re-image but thats another story ) however after adding the VDB (build 361) and latest Geo file. I am unable to deply any polices. In the...
Hi EveryoneWe have a pair of FPR4110 in our DC. I cant' login to the FXOS with any user and passwod. The GUI prompt me user and password. I even try SSH but another error rises.I try reloading chassis, upgrading chassis to suggested version problem ...
Planning on using FMT on a pair of ASA's running FPS. Question 1) When using the FMT and pushing the config to the new fmc which houses the new target FTD's. Does FMT then shutdown the interfaces on the source ASA to avoid ip conflicts - or do we hav...
I am just beginning with SecureX and I enabled on the FMC that manages 4 FTD1010's . However after enabling I only see the FMC and 2 out of the 4 managed FTDs in the Securex portal. I was wondering before I bother TAC on this if anyone knows a way to...
