Currently using FirePOWER, experiencing an unexpected SSL Block for some traffic, SSL rule has been created not to decrypt the traffic, URLs that are being accessed are whitelisted, SSL Flow error is Defer Cut Post CCs (0x0000197), SSL version TLSV1....
Forum Posts
Hello, I have 2 FTDs in the environment which are being managed by FMC. I want to generate Reports for CPU and Memory Utlization for the FTDs. I have enabled CPU Usage alerts in Health Policy , however how can Reports be generated for a particular da...
I setup File Policy by just watching a video on how to do so. I am not sure how the policy actually works. Looking at the below are these files actually all being scanned for maleware in the cloud??? How do I know I am setting things up properly and ...
I would like to enable syslog alerts in the default "Connectivity over Security" IPS policy so that I don't have to change a bunch of ACP rules but I don't seem to be able to do this. There doesn't seem to be a direct way of editing it but if I firs...
Hi All, We have NPS configured to authenticate access to our ASA and it doesn't not appear to be working properly. The logs for the NPS indication I was granted access, it reflects the policy I created in the log details but the ASA rejects the logi...
Resolved! Reimage FMC, need to configure FTD?
Hi, so Im planning to reimage my FMC, but before doing that i need to know what gonna happen if i do that.I want to know if i reimage the FMC, do the FTDs will forget about the FMC and i have to config them manually on site or there other way to conf...
Hi all, I have an access rule configured as below which does not seem to work. source network object -> any Ports any -> 443 URL -> microsoft.com When running packet tracer, the traffic to microsoft.com is allowed, however, traffic to another websit...
Hello, After migrating a couple of ASA firewalls to FTD, I'm thinking about start using application rules instead of traditional port based rules, but I have a couple of questions regarding this. For example, if I would like to allow outgoing DNS tra...
Hello AllA rather basic enquiry but a frustrating one.I am trying to allow a hide-nat host out to the Z-Scaler Range, all subnets within the range has access to the Z-Scaler Zen, apart from 1 host. I am in a position where I am unable to disable thi...
hi,i got a pair of ASA FW in active-standby setup each in a different building.we're closing one of the building/rack and plan is to bring the primary-active FW to the next building where secondary-standby FW is installed.is there a "safe" way of cha...
Resolved! Unable to exclude host from QoS Policy
We have a 4110 Firepower running 7.0.2 managed by FMCv also running 7.0.2. We've had a couple recent events where Adobe released updates and our Internet bandwidth was impacted. An update server has been created, so I'm trying to exclude this server ...
After I upgrade new firmware(ftd-fp2k.6.6.7-223.zip),I can not log in firepower with username and password default.Are there somebody can help me?FTD loading so long and after that it reboot ,reboot so many times.Now I cannot log in to the device. Wh...
Dear Support Communityi wanted to know if someone knows how to change the Timezone for a Firepower 2130 managed locally by FDM, we're using version 7.0.4. On the time settings we only can set the NTP servers, but no timezone. Also tried with Flexconf...
I have 2 brand new fp-1140-asa appliances, MGMT ports get IPs via DHCP. Console ports are connected to our known working console server (9600-8-N-1) and I can't get into this box on either. MGMT IP https gives me the ASDM page and I have tried all...
Hello, I am getting these errors on the firewall and am not 100% sure how to resolve them. Any help on this would be great! Thank you in advance. ModelSoftware VersionOS Cisco Firepower Management Center 16007.0.2 (build 88)Cisco Firepower Extensibl...
