Hi - We have a multi context firewall with portchannel subinterfaces. Is there a way to failover monitor the individual physical ethernets bundled into the portchannel? So if one of the physical Ethernet links in the port-channel goes down, we want t...
Forum Posts
Hello,I recently started working with Networking and I was looking through the configurations of the ASA, and it appears that our federated Microsoft server is configured for an IP address that is not the IP address of on 2 on prem servers. I also no...
Hi Everyone, we have an IPSEC tunnel between FP2110 and ASA firewall. Tunnel is stable and operational but every hour, at the same time, peers (firewalls) at both ends send TCP RST packet to the endpoints at their side that are having active sessio...
Hello Sec GURUs, I have two different questions please: 1- Im using Anyconnect with LDAP server (AD) to feetch the user ad creds, everything work fine as long as i'm point think LDAP server DC=companyname, DC=domaine, DC=com. Once I adjust the BASE D...
Dears, For now we are using 2.0 version. As I know we have to do these steps in order to get 2.7 and higher - 2.0-->2.2-->2.7The question - is there any manipulations with licenses? I mean do we need to convert them to smart, or export and then impor...
Resolved! upgrade software version ASA 5525-X
Hi all, as per title I have to upgrade software version of an ASA 5525X. actually my current version is 9.1(1) so for the ASA upgrade path i need upgrade an interim version 9.1(2) then I can proceed with the 9.12(x) or 9.14(x). My problem is: version...
Hi,We need to bypass Teams / Zoom traffic from internal proxy and let these traffic via FirePower.I got a long list of URL and IPs for the traffics.But I don't know how to allow these traffics to go through FirePower while we didn't setup NAT for int...
Im getting this critical warning "SSL Version 2 and 3 Protocol Detection" from a security scanning device on my Cisco switches , can this warning be removed if i disabled http and secure http on my switches as in below? no ip http serverno ip http se...
Resolved! DCE2_EVENT__SMB_BAD_NEXT_COMMAND_OFFSET
Hello,Does anyone know if this is still considered a bug in 7.0 within the FMC? I'm seeing a lot of these events being triggered from folks copying to and from our share drive. I'm not sure if whitelisting is the best way to go or if there's another ...
Hi, Quick dumb Question , if a FW has an SSL Encryption Policy , does it mean Firewall Admins can see/read the SSL Decrypted Data ? Or by any sort of Debug FW Admins can read the SSL Data as FW has SSL Encryption/Decryption enabled ?
Hello,I have been working on trying to recreate or at least determine the layout of the lab that has been down for awhile. From what I can see the lab was sub-ip'ed through the ASA, and only permitted access to that vlan through a lab-mgmt-server wi...
Hi Team, Please help me we are able to register base license into FTD (FTD into HA) we got mentioned error(screenshot) Please note secondary device currently not working fine. Thanks & Regards, Sachin Sharma
Hello, One of my customer is requesting to see the total amount of AnyConnect traffic on our FTD (Version 7.2.1) and preferable in a dashboard graph showing traffic over time in Gbps/s in FMC.I figure out it might be a bit difficult to distinguish it...
I am reading the guide regarding the interface types on 4K FXOS in chassis manager. I am not sure I understand the "Eventing" interface. Is it supposed to be used as the dedicated link to FMC for sharing events, so the management interface on the FTD...
Hello, We have a Firepower FTD 4112 (Version 7.2.1) with AnyConnect and we need to use full tunneling mode. However, some users have issues when using Microsoft teams and it seems to be quite common when running full tunnel VPN. I was reading this do...
