Hi; I have a test lab and want to integrate FMC 6.2.2.81 with ISE 2.2 (patch 5). Also I have an Internal MS CA server and have imported the CA root certificate into ISE and FMC already. Now I want to generate CSR of FMC to get a FMC Server Certifica...
Dear All, we've installed two 2130 FTDs in HA, managed with FMCv, we've configured a rule to block facebook & Youtube. on the Application tab we've selected HTTP & HTTPS plus on the URL tab we've added facebook.com & youtube.com urls. but the traff...
Hello,At my work we have buy new wan connection.The topology isSW_Core ----->FTD---->Outside wan1-2-3in the SW_Core are 3 vlan:WAN1 WAN2 WAN3 From the FTD, WAN1 ----> can ping wan1 gwWAN2 ---> can ping wan2 gwWAN3 ---> cannot ping wan3 gw.and i don'...
Hello, I have 2 x FPR2110-ASA-K9 and I'm trying to set up an active/standby state between them but unfortunately I face a lot of issues. Versions : Cisco Adaptive Security Appliance Software Version 9.8(2) Firepower Extensible Operating System Versio...
Hi All,I need assistance to login using my FDM GUI. Output below are on waiting state. I can access firewall through CLI. Refer screenshot of the login page with error. root@rg-firepower-fw:/home/admin# pmtool status | grep -i waitingTSS_Daemon (norm...
I've got a FMCv in the lab and am attempting to upgrade from 7.2.0.1-12 to 7.2.1-40, however it is failing the upload from the workstation to the server. Product Updates, Upload Update, choose file and click upload. It goes through the motions and ...
Up until now, we have been using port forwarding with an SFTP server on our local network to share and receive files from partners and vendors (not very secure I know), but we have switched to a Cisco network with a firewall now. What is a recommende...
Hi everyone. Just a heads up that I am in over my head here so please bear with me. I was recently tasked with moving all of our FP1010 VPN tunnels away from our Cisco ASA and over to our Palo Alto firewall. I have successfully done so with five of t...
Hi,After configuring the port security on the interface and run Switch1#show port-security interface Te1/0/1 Port Security : Disabled Port Status : Secure-down Violation Mode : Restrict Aging Time : 2 mins Aging Type : Absolute SecureStatic Address ...
Hello Everyone,I have a quick question that will likely be a no brainer for most of you. I have a Cisco ASA that needs to Log all allowed traffic to a logging host. There are currently 3 logging hosts on the Configured and I would prefer to only send...
Hello,On the asa, with ASDM, in the monitoring, I only see the requests in deny, I do not see the authorized ones.To debug a problem, I would like to be able to see all request, deny and allowed.#sh run logginglogging enablelogging timestampno loggin...
I seem to be doing something wrong with inheritance settings based off parent ACP. In the attached screenshots you can see what I am trying to do is establish mandatory Geo and URL block rules for all sub FTD policies to inherit. However it appears w...
If I have a customer who co-locates on my network with a couple of servers and I configure a subnet, what's the best way to allow them access via teamviewer or similar just to their particular servers and no other devices on my network?So, it would l...
We are getting the following warning - ModuleProcess Status: The user interface daemon exited 5 time(s) and can't seem to find a solution listed anywhere
Can Firepower identify traffics for routing protocol such as BGP and OSPF? I want to bypass BGP and OSPF traffics to boost my firepower performance. Thank you.
