I have a working site to site vpn between a client router and a ftd.I have a device on the router side that need to access a resource on the internet so I think there is no point on send that traffic to the tunnel to then send it to the internet so I...
Forum Posts
We're using Anyconnect SSL VPN to ASA.* Asa inside interface is 192.168.1.1/24* There is nothing else but another firewall on the other end of "insde": 192.168.1.2* VPN clients use IP pools 172.16.1.0/24 and 172.16.2.0/24. This is mainly set up such ...
I have read quite a few articles online but I can't seem to find a definitive answer to this seemingly simple question. Unfortunately, I can't test it out on my gear either. Is it as simple as subinterfaces or is that not possible with a bridge-group...
Resolved! Radware DefensePro and Firepower 4112
Hello, I have a customer with a Firepower 4112 appliance with a FTD instance and they have asked me if it's possible to run an additional instance of Radware DefensePro in the same chassis. Anyone know if that's supported on the 4112? I'm only able ...
Hello everyone,I have a problem with my FPR, since no internet connection is established, kindly find attached photo which shows an overview of the FPR status,Model: Cisco Firepower 1010 Threat DefenseVersion: 6.4.0-102Topology: Mikrotik port 2 conne...
Hi everyone!I was wondering if anyone can help us with the below.We have several Cisco switches, APs and a Wireless Controller and we would like to kow if there is a way to automate the patching process. I have found this link here https://community....
Resolved! Upgrade to FMCv300?
I have a FMCv currently in vCenter and speced with 8vCPU and 32GB ram. I want to move to FMCv300. There are two licenses related to FMCv300: SF-FMC-VMW-25-300 and SF-FMC-VMW-300-K9. I assume I would need the “SF-FMC-VMW-25-300” in my case to move my ...
What would be the difference between an allow rule with no IPS policy selected and a trust rule? TIA
I have asked for help before on this module and did not get anywhere, but here goes again. I am looking to re-image the AP module due to the fact it is not accessible through CLI or WEB app. I would appreciate any assistance on getting the WIFI modul...
Hello Folks, I have 2 FP-2210 in HA managed by FMC and I noticed recently that one of the Firewalls has no valid SSH credentials, based on the Keepass, I want to recover that specific Firewall CLI password without reboot so I won't bother productio...
Resolved! ASAv not pingable in GNS3
Hi,I have created a basic scenario on GNS3 with ASAv and a PC but there I am troubling in ping issue from PC to ASAv or vice-versa. I am attaching ASAv configuration hostname ciscoasaenable password $sha512$5000$weTQEksgaEbyw8U3MT2a9A==$kzi7RjydjZXE...
Hi,I confuse how to work NTP traffic. My network device need NTP from window server. the firewall is between my network device and Window server .I enable NTP server service on window.So i would like to know If i open NTP port 123 on firewall for the...
Hi Guys, I have an ISRg3 WAN running IOS PKI & SCEP with flexVPN which is working well. I have tested the Hub CA with both SCEP 'Grant Auto' and 'Terminal Manual' Spoke enrolment which works great. However, I'm after a halfway house in an ideal world...
Hi, I am getting the below log in my mail server while sending mails. Jun 25 15:52:39 xxxxxxx postfix/smtpd[12595]: disconnect from localhost[127.0.0.1]Jun 25 15:52:39 xxxxxxx postfix/qmgr[12566]: 32204DF9FE: from=<[email protected]>, size=602, nrcp...
i have the firepower 1120 and in dmz zone my mail server exists. the mailserver works ok, but when i try to sending mail on specific mail address i receive socket error 10053 and 10054 , i found somewhere on internet i must disable esmtp inspection, ...
