We've had excessive Adobe downloads, so a system has been setup to download the updates from which we'll distribute them internally. Until this is done, we have a QoS rule that is restricting the bandwidth from all systems to Adobe. Now that the serv...
Hi all, When I tried to launch ASDM to access my ASA firewall, I got this error "ASDM is unable to read the configuration from the ASA since it is currently synching. Please try again by clicking the refresh icon. I tried several times but to no avai...
Hi AllHope you are doing fine.Recently I came across a DoS-related article which is as followshttps://geneva.cs.umd.edu/posts/usenix21-weaponizing-censors/Can anyone help me Protect TCP Middlebox Reflection by Cisco Firewall or any other solution lik...
Hi CommunityI have a ASA5520 with ASDM 6.2 installed. From the firewall I can ping 8.8.8.8 and from the Switch I can ping 8.8.8.8 however from a workstation I am unable to connect to the internet. Screenshots of Firewall and workstation is attached. ...
Currently using FirePOWER, experiencing an unexpected SSL Block for some traffic, SSL rule has been created not to decrypt the traffic, URLs that are being accessed are whitelisted, SSL Flow error is Defer Cut Post CCs (0x0000197), SSL version TLSV1....
Hello, I have 2 FTDs in the environment which are being managed by FMC. I want to generate Reports for CPU and Memory Utlization for the FTDs. I have enabled CPU Usage alerts in Health Policy , however how can Reports be generated for a particular da...
I setup File Policy by just watching a video on how to do so. I am not sure how the policy actually works. Looking at the below are these files actually all being scanned for maleware in the cloud??? How do I know I am setting things up properly and ...
I would like to enable syslog alerts in the default "Connectivity over Security" IPS policy so that I don't have to change a bunch of ACP rules but I don't seem to be able to do this. There doesn't seem to be a direct way of editing it but if I firs...
Hi All, We have NPS configured to authenticate access to our ASA and it doesn't not appear to be working properly. The logs for the NPS indication I was granted access, it reflects the policy I created in the log details but the ASA rejects the logi...
Hi, so Im planning to reimage my FMC, but before doing that i need to know what gonna happen if i do that.I want to know if i reimage the FMC, do the FTDs will forget about the FMC and i have to config them manually on site or there other way to conf...
Hi all, I have an access rule configured as below which does not seem to work. source network object -> any Ports any -> 443 URL -> microsoft.com When running packet tracer, the traffic to microsoft.com is allowed, however, traffic to another websit...
Hello, After migrating a couple of ASA firewalls to FTD, I'm thinking about start using application rules instead of traditional port based rules, but I have a couple of questions regarding this. For example, if I would like to allow outgoing DNS tra...
Hello AllA rather basic enquiry but a frustrating one.I am trying to allow a hide-nat host out to the Z-Scaler Range, all subnets within the range has access to the Z-Scaler Zen, apart from 1 host. I am in a position where I am unable to disable thi...
hi,i got a pair of ASA FW in active-standby setup each in a different building.we're closing one of the building/rack and plan is to bring the primary-active FW to the next building where secondary-standby FW is installed.is there a "safe" way of cha...
We have a 4110 Firepower running 7.0.2 managed by FMCv also running 7.0.2. We've had a couple recent events where Adobe released updates and our Internet bandwidth was impacted. An update server has been created, so I'm trying to exclude this server ...
