HiSo, i have a LAN network and a WAN network. For my LAN network, i use Cisco ISE as the NAC solution. And for my WAN network i use Forescout as my WAN solution. Right now, i can integrated my Firepower with my Cisco ISE, so i can block user access t...
Forum Posts
Hello, I have an ASA5515X and it has been working ok up to now. I have now set up an exchange server on my private network. I have an AnyConnect VPN set up and it works great.I have followed all examples of how to set up mail routing but no matter wh...
Hi,Does running an ASA at debugging level logging 100% of the time impact CPU and or Memory? Are there recommendations from cisco about not doing this? We are having a discussion about ASA debugging level logging versus doing the same on routers. Of ...
Resolved! Problem excluding some health alerts
Hello, We are running a FMC with two FTDs in a H/A pair. Both the FMC and FTDs are on version 7.2.1 I want to exclude interface status alerts on the passive FTD, but that seams to be impossible. When going to Health->Exclude and select the passive FT...
HiI have FMC 7.0.4 and two FTD 1120 in HA v 7.0.1.I am testing file policy with rule: block all files in all directions. SSL decryption is configured and working. All files have been blocked except .docx, .xlsx, .pptx files.I do not have event that f...
HiWe are experiencing an issue with our FMC scheduled backup. If I configure Remote storage for our SFTP server. We get the backup failed error when the scheduled backup runs.If I configure the remote storage to local storage, then copy when complete...
Hi,Any one pls share the steps to find out the status/validity of VPN Client certificate in CISCO ASA Firewall. Regards,Dhruva S.
Resolved! Firepower HA 2 subnets problem
Hi All I have 2 Firepower FTD (2130 models) in HA (high availabilty)mode working well in routed Mode. Its working using ONE protected subnet eg 98.x.x.0/24 for my servers. My servers are reachable from the outside using Public Addresses etc. BUT I ...
Hello,We have a Cisco ASA5516 firewall with Cisco AnyConnect VPN license. The unit has failed last week and the device is not under support. We would like to move the config to a spare unit but not sure how to transfer the Cisco AnyConnect VPN licens...
I am trying to proof of concept setting up alerts using concern index in stealthwatch. I'm doing a simple test for POC. I setup an alert to have stealthwatch increase the concern index of a test PC if it receives ICMP packets. I'd then like to thr...
Is it possible disable diffie-hellman-group1-sha1 in a Cisco 2811 Os v.12.4(24)T2 router? I put this command: > ip ssh dh min size 2048 for 2048 bits, but in security scanning says that it permits: | kex_algorithms: (3) | diffie-hellman-group-exchang...
hi, so i'm integrated my firepower with ISE, and i have a rule that will quarantine user that try to access something dangerous. The quarantine option come from ISE, but Firepower is the one that trigger the action.I want to ask, if user get block in...
Current topology for S2S is Mesh with 4 FTD members all Peered using Outside Public IP addresses. Two of these FTD's have secondary ISP interfaces designated as backup links configured within SLA. I want to add a new topology for the S2S tunnels to r...
So, i integrate identity policy on firepower with my active directory. All works, but there one problem. Somehow when i see the traffics log, i can see the user password.Anyone know why this happen?For my use case, i just want to use identity policy ...
So i have a LAN network, I also have a storage in that LAN server. The problem is, right now if i send a file from my PC to the storage. The protocol being used is FTP. I want the file to be encrypted, so other people can see what i send in the netwo...
