Good day, community. I am in the process of migrating ASA to FTD, and I leveraged FirewPower Migration Tool to generate a migrated ACL on FMC but did not apply the migrated ACL to our FTD yet, since I need to make quite a few changes which I really h...
Forum Posts
Hey I got my CCNA last year and want to start studying for CCNP Security and want to know what device I would need. I prefer to have physical device, but I'm not sure which one is best or what specs I would need. I would like input from some one with...
We are migrating from ASA to FTD, and we have a large number of L3 interfaces on ASA as servers' default gateway, so on FTD we need to keep them as sub-interfaces and group them into a small number of Zones. At GUI I configured Source -> Zone1.Subint...
Hello, Our wildcard certificate on our prod ASAs (VPN headends/gateways) will expire in a month or so. When reviewing the status of the wildcard cert in ASDM by going to Certificate Management\Identity Certificates, the "Expiry Date" shows that it w...
I am trying to test if our ssh parameters are correct on our cisco routers, and my coworker tried something I'm not sure is working : connect from router A to router B via ssh, and form there connect from router B to router A via ssh A -ssh-> B -ssh-...
Hi All, After upgrading to 7.0.1 and/or 7.1 our Cisco Firepower 1010 devices suddenly stopped forwarding packages on ports configured as switchports, routed ports works perfectly, and the ports that stops forwarding is random ports, and we have to sw...
The diagnostic interface is reachable over a VPN tunnel by our NMS server (can ping and ssh into it), but the firewall (ASA 5508X running FTD 7.0.1, managed mostly by CDO except for SNMP and DHCP relay (argh!!)) isn't responding to SNMPv3 queries - ...
It appears this particular firewall is not acknowledging the last rule prior to default action. Its the only firewall in our fleet ignoring that rule. I test all other firewalls and confirmed they are matching. I made sure the zones are applied to in...
I have an FTD 1010 with only a base license and a requirement to use this as a simple Internet router/gateway. I have a dynamic NAT rule using interface PAT and one access rule that trusts outgoing traffic. If I set the default action to block I ca...
HelloI would like some guidance on my new Firepower 2110. This is out of the box.I would like to run ASA on this device as platform mode and upgrade it using. The Firewall currently has the default software 6.2 installed. I tried uploading a package ...
Resolved! FTD NAT to Exchange server help
I am banging my head here trying to figure out why I can't get Exchange email to flow. I have this same setup at a different site with no issues. I have the settings mirrored to this new site and Exchange email will just not flow. I currently have ...
I have a stand alone FTD that is remote with its only connection to the DC is via Site to Site VPN on the "outside" interface. I read where the version we are running supports using the data port as the management port, but I can not find any detail ...
Resolved! remote SSL VPN
dear Gentscould you please support I am using ASDM for ASA and I have privileges' 15 but once I access ASDM I can't see any tab for remote VPN or even I can't see it in VPN wizard I try to check in options but nothing , kinky refer to image in attac...
I was wondering if there is a way to automatically block IP addresses depending on traffic analysis. I see a number of attempts from an attacker and see the traffic is being blocked on the attempt but I would like to impose a temporary block on any ...
Resolved! FPR1010 can't access *SOME* web sites
Hi all, I have run in to a weird issue with the FPR1010. When connecting a client machine to the inside network, I can browse some but not all web sites. The particular problem is my 'test' site of www.bbc.co.uk. However, rather unbelievably, it will...
