HiI have Cisco ASA 5525 with 500k limit on the current license. What i noticed if the conn count proportionate to xlate count things run smoothly. But at times if there is disruptions to the network when it comes back i see the xlates is rapidly incr...
I am new to Firepower devices trying to deploy a new Firepower 1140 ONLY USING FDM, NO FMC...I have VPN AnyConnect set up with our internal server verifying users. User verification works, you get access to internal network from the outside on VPN. O...
How do I unzip Cisco secure package files (CSP)? I guess PGP is used. But there is no fxos chassis in my development environment. It gives me a headache.
Hi, I am trying to download image from FTP server my config is given below. I am not able to ping Gateway neither ftp server. Am I missing anything here ? rommon 1 > setADDRESS=10.178.224.179NETMASK=255.255.255.0GATEWAY=10.178.224.254SERVER=10.176.57...
I am re-imaging two ASA-5545Xs with a vFMC from 6.3.0.5 to 6.6.5. I recovered the module and installed the boot image file without any issues however, when trying to download the firepower software package via FTP, it repeatedly fails at random perce...
hello everyone i have cisco fmc 6.7 and ftd 2110,is there any hotfix for log4j vulnerability that relased for fixing it thanks for your kind replay
I currently have 4 ASA 55xx w/ firepower devices in my network topology.the devices are registered in FMC post VPN connection.my FMC is on my internal network on site 1. (192.168.1.3)each one of my ASAs do a site 2 site tunnel to the main office via ...
Hello. I installed 2 ASA 5506-X and activate firepower same security policy.But only 1 ASA 5506-X has problem. When It is using firepower, ASA internet loss briefly (5~10 seconds) about every hour.I removed firepower, it was OK. So I tried firepower ...
We can unable to access the module via SSH and tried accessing the session hardware 1 from the console and we are getting no response. Anyone faced this issue any probable solution that we can try through ASA CLI. ?? XXXXXXXXXXXXX/sec/stby# sh modul...
Hi all,I moved to a new job couple months ago, and they are using CISCO FTD's. I am a PaloAlto guy and still learning about FTDs, and to be honest I am not a big fan of FTDs as they are not flexible and stable as Palos. Anyways, whoever built those F...
I am reading the ENARSI chapter on CoPP, and it had just occurred to me that if we are protecting the CPU from unnecessary burden/ attacks, where are the ACL's processed in the router? Are the processed in CEF at the data plane? I cant seem to rememb...
In FTD, while the file is being analyzed in the sandbox by ThreatGrid, when happens to file in transit?Please let me know if this is correct:If the file policy rule action is "Malware Cloud Lookup", I believe the file is sent to the end user and a ma...
Hello everyone. Please, someone help me?I'm a problem for installation of the image cisco any connet in FTD Firepower due to the use 100% of partion /dev/root: Filesystem Size Used Avail Use% Mounted on/dev/root 3.7G 3.7G 0 100% / I alread clean sev...
Hi, I need to create Outside ACL with Office365 wildcard domain in order to filter outside -> inside connection. Is possible to do that? I know that 5525X does not support Wildcard Domain.Thanks a lot
i have the firepower 1120. i configured my device for access to internet from DMZ zone and to access to my web server, but with default action allow. when i set default action BLOCK, and i create NAT: manual for accesss dmz zone to internet and autom...
