Hi, We know that Cisco supports anyconnect over SAML, but does OAuth also supported? If yes, how to confiurate it on cisco asa. I dont see any as such config document. Please need a quick response. Thanks in advance.
After reading the NGFW Policy Order of Operations guide here, https://www.cisco.com/c/dam/en/us/td/docs/security/firepower/Self-Help/NGFW_Policy_Order_of_Operations.pdfI am even more confused about how the firepower device processes rules. According ...
I have FMC 7.1 and want to reduce my ACL. When I tried to add a network with a wildcard mask of 0.0.255.63 to the list of network objects, I got the error "Invalid IP Address". At the same time, a network with a wildcard mask of 255.255.0.63 is creat...
hello ,i have a Cisco 5525 with firepower , i've added it to my FMC .and every time i add a new access policy and hit save and deploy i can't edit it anymore and i can't place another rule above it .i can only view the settings of the rule.i can't de...
Hi,we're in the process of implementing TACACS+ AAA on our routers, during the process, the security team noticed that on IOS-XR the only option to encrypt such a key is type 7 which, is easily reversed. I've followed this up with TAC and the enginee...
Hi We have switch c3850/ver 03.03.01.SE. Now some insecurity message (Please see the below) is sent to us from tenable. The device has the below two commands. Are these two commands is the reason for the insecurity? Thank you ip ssh server algorithm ...
I have a FMC 1000 ver 6.6.5 and FTD 1120 ver 6.5.5.is it possibile to cofigure via flexconfig PBR to route different subnet towards 2 different ISPs?(i don't need reachability control, only source based routing).Many tksJohnny
Good day, I can't really get any further.We have set up both an acl and custom attributes for dynamic tunnel exclusions.In order to reach the local VM on the host, we have stored a private 172 IP range inside our acl for the tunnel exclusion.Unfortun...
Hello. I need to configure SNMP for Cisco Firepower 2110 to communicate with our Zabbix server. How do I do this? I cannot find any way how to enter the Zabbix server's IP address to Cisco Firepower to make it working. Thank you for your help.
Hi There,We have just purchased a 2110 and were in the process of setting it up and have hit an early road block. Our ISP is using a /31 subnet for our internet link and it seems FMC will not support this when configuring the interface.Is there any w...
Hi, For the Firepower v7.0 platform is it possible to change the Syslog forwarding port from default udp/514 to something else, for FMC, FTD, the Intrusion Policies?
Hi,We just upgrade CISCO ASA to 9.14.3.18 and asdm 7.16.1.150. We go to monitoring -> real time log viewer and it shows: "Error = SYslog connection lost- Tray restarting the syslog connection". Why its happening this?
In configuring FTD cluster mode, 2 4115 appliances have channel-group 48 configured and both FTD's are connected to a 9400 with a channel-group 48. I can get only 1 interface in the ether channel up at a time. One is always in a suspended state.FX...
