Network Security

ASA Split Tunneling/Dynamic-Attributes

Good day, I can't really get any further.We have set up both an acl and custom attributes for dynamic tunnel exclusions.In order to reach the local VM on the host, we have stored a private 172 IP range inside our acl for the tunnel exclusion.Unfortun...

Configuring SNMP for Cisco Firepower 2110

Hello. I need to configure SNMP for Cisco Firepower 2110 to communicate with our Zabbix server. How do I do this? I cannot find any way how to enter the Zabbix server's IP address to Cisco Firepower to make it working. Thank you for your help.

Resolved! Firepower FTD 2110 /31 IP

Hi There,We have just purchased a 2110 and were in the process of setting it up and have hit an early road block. Our ISP is using a /31 subnet for our internet link and it seems FMC will not support this when configuring the interface.Is there any w...

Firepower - Change Syslog port from default

Hi, For the Firepower v7.0 platform is it possible to change the Syslog forwarding port from default udp/514 to something else, for FMC, FTD, the Intrusion Policies?

Resolved! CISCO ASA just upgraded (9.14(3)18) - error ASDM - sysloig connection

Hi,We just upgrade CISCO ASA to 9.14.3.18 and asdm 7.16.1.150. We go to monitoring -> real time log viewer and it shows: "Error = SYslog connection lost- Tray restarting the syslog connection". Why its happening this?

Resolved! Reverting FMC ACP update via CLI?

Hi All is it possible to rever an ACP update via CLI?

FTD to 9400 Etherchannel in suspended state for clustering

In configuring FTD cluster mode, 2 4115 appliances have channel-group 48 configured and both FTD's are connected to a 9400 with a channel-group 48. I can get only 1 interface in the ether channel up at a time. One is always in a suspended state.FX...

Resolved! FTD 1120 Remote Deployment to Branch Office Managed by FMCv

The FTD 1120 is currently paired to the FMCv using the diagnostic/management port, both FTD and FMCv are in HQ at the moment.However, the branch office that the FTD 1120 will be deployed to only has Outside Internet. No tie-back to HQIf I check "Enab...

Firepower URL Malware Block for *.moatads.com sites

I'm seeing numerous block to various moatads.com sites in Cisco Firepower starting around 8A CDT today. Anybody else experiencing this?

SNMP POLL not showing all interfaces

HI Team, We have FTD 2100s operating in routed mode and firewall mode.We are trying to do an SNMP walk from the SNMP tool. When doing the walk on the FTD in routed mode, we can see all interfaces ( up /down both)However, when doing walk on the fire...

Firepower 1120 LDAPS not working but LDAP is.

I am able to login through our firepower 1120 through VPN if i run LDAP through our AD.If I run LDAPS instead it does not work.See the attachment.

Cisco FTD via FMC S2S VPN

Hi,I have configured a S2S VPN between our on-premise Cisco FTD via FMC ver 6.6, with the peer device in Azure cloud fortigate firewall. i also have an existing VPN running fine between On-prem Cisco and Azure native Firewall (VNG). After configuring...

Resolved! Upgrade FMCv to 7.1.x Question

Can you upgrade FMCv from 6.7.0.65 directly to 7.1.0.90 or do you have to upgrade to 7.0 first and then upgrade to 7.1? Thx in advance for any assistance given.

Supporting two outside interfaces on ASA 5510

Hello, I am planning to change my Internet provider, but it must be done in stages so in addition to my existing outside interface, I need to create a secondary outside interface to a different carrier. But both interfaces need to NAT to an inside s...