Hi CommunityI have a ASA5520 with ASDM 6.2 installed. From the firewall I can ping 8.8.8.8 and from the Switch I can ping 8.8.8.8 however from a workstation I am unable to connect to the internet. Screenshots of Firewall and workstation is attached. ...
Forum Posts
Currently using FirePOWER, experiencing an unexpected SSL Block for some traffic, SSL rule has been created not to decrypt the traffic, URLs that are being accessed are whitelisted, SSL Flow error is Defer Cut Post CCs (0x0000197), SSL version TLSV1....
Hello, I have 2 FTDs in the environment which are being managed by FMC. I want to generate Reports for CPU and Memory Utlization for the FTDs. I have enabled CPU Usage alerts in Health Policy , however how can Reports be generated for a particular da...
I would like to enable syslog alerts in the default "Connectivity over Security" IPS policy so that I don't have to change a bunch of ACP rules but I don't seem to be able to do this. There doesn't seem to be a direct way of editing it but if I firs...
Resolved! Reimage FMC, need to configure FTD?
Hi, so Im planning to reimage my FMC, but before doing that i need to know what gonna happen if i do that.I want to know if i reimage the FMC, do the FTDs will forget about the FMC and i have to config them manually on site or there other way to conf...
Hi all, I have an access rule configured as below which does not seem to work. source network object -> any Ports any -> 443 URL -> microsoft.com When running packet tracer, the traffic to microsoft.com is allowed, however, traffic to another websit...
Hello, After migrating a couple of ASA firewalls to FTD, I'm thinking about start using application rules instead of traditional port based rules, but I have a couple of questions regarding this. For example, if I would like to allow outgoing DNS tra...
hi,i got a pair of ASA FW in active-standby setup each in a different building.we're closing one of the building/rack and plan is to bring the primary-active FW to the next building where secondary-standby FW is installed.is there a "safe" way of cha...
Resolved! Unable to exclude host from QoS Policy
We have a 4110 Firepower running 7.0.2 managed by FMCv also running 7.0.2. We've had a couple recent events where Adobe released updates and our Internet bandwidth was impacted. An update server has been created, so I'm trying to exclude this server ...
After I upgrade new firmware(ftd-fp2k.6.6.7-223.zip),I can not log in firepower with username and password default.Are there somebody can help me?FTD loading so long and after that it reboot ,reboot so many times.Now I cannot log in to the device. Wh...
Dear Support Communityi wanted to know if someone knows how to change the Timezone for a Firepower 2130 managed locally by FDM, we're using version 7.0.4. On the time settings we only can set the NTP servers, but no timezone. Also tried with Flexconf...
I have 2 brand new fp-1140-asa appliances, MGMT ports get IPs via DHCP. Console ports are connected to our known working console server (9600-8-N-1) and I can't get into this box on either. MGMT IP https gives me the ASDM page and I have tried all...
Hello, I am getting these errors on the firewall and am not 100% sure how to resolve them. Any help on this would be great! Thank you in advance. ModelSoftware VersionOS Cisco Firepower Management Center 16007.0.2 (build 88)Cisco Firepower Extensibl...
Does anyone know why the iPhone's certificate is not trusted (see attached) image. There is no error in Cisco ISE's live log but did see a message in ISE under the certificate section saying that this certificate is NOT used to verify the authentici...
We currently have two ASA 5515x's in an Active/Standby failover setup that we will be migrating to the same failover setup with two 1140 FTDs. I see there is a Migration tool for converting the ASA config to FTD. From an install perspective is there ...
