Network Security

Resolved! Firepower: Is it possible to allow the execution of a single file?

Hello everybody,our customer is running Firepower (FMC and FTD with rel 6.6.4).It is easy to allow SMB access through a Firepower by an Access Control Rule.But the customer has the request to allow only the execution of a certain exe-filelocated on t...

Firepower 4000 Change management interface to another port

anyone got experience if wanted to change management port example from Eth2/8 to Eth 1/8, what is the process? go to FXOS configure another interface as Management, then plug the cable to it then can d? it does not mention clearly from the documentat...

ASA5516-X: Usefulness of the AgentService.exe process

Hello, One of our servers has this executable:\Cisco Systems, Inc\Cisco Firepower User Agent for Active Directory\AgentService.exe-What is the use of this process?-Why does it do exec RPC on remote machines?-If we remove it what is the impact on our...

FMC Insider Threat/Malware Detection Across the LAN

In regards to Cisco's Threat Deteaction how would you scan for insider threats if the device doesn't have the Secure Endpoint software installed? Situation: The LAN is setup with Cisco Firepower FMC monitoring with AMP for Endpoints or (Secure Endpo...

Resolved! Packet tracer with firepower application IDs

Hello, I recently started updating my ACL rules on my FTD devices in FMC from using ports to using application filters. The problem I've been running up against is trying to use packet tracer to identify what rule will get hit in a given scenario. It...

Resolved! FTD Nat Question

HiIs it possible to Nat to another device so if I have a public IP natting to a Private IP does that private IP have to reside on the FTD or can it somehow be forwarded on to private IP (server) routing is inplace between FTD and Server.??? Thanks

Wildcard domain matching on the FTD

I am trying to limit internet access for a server that needs access to several wildcard based domains and I can't figure out if that is possible on a Firepower FTD managed by FMCAs an example, one of the requirements is*.compute-*.amazonaws.com - TCP...

Resolved! Adding pre-configured FTD to FMC

Hello Community!!! I have a question. I know how the process is to add a FTD into a FMC. The thing is that I don't want to lose the configuration that I have on the FTD because we have VPN S2S, SSL, NAT, Policies, and so on. My question is, addin thi...

Resolved! Is it possible to move existing rule into prefilter policy within FMC

Our FMC and FTDs are running 6.6.4. We have some rules that fit better into the prefilter policy, so it it possible to take a rule that is in the standard ACP and move it into the prefilter policy, or will it have to be recreated? Thanks

Resolved! Native Vlan mismatch

I am getting a vlan mismatch all though I have configured the native vlan on both interfaces as vlan 30 interface FastEthernet0/22switchport trunk native vlan 30switchport trunk allowed vlan 10,20,30switchport mode trunk This is the configuration on ...

Lost one of FTD device in HA Configuration

I have two Cisco Firepower 2110 in HA Configuration. I tried to perform version upgrade from 6.4. to 6.6. I got Device2 (Standbyd device) upgraded to 6.6. But the Device1 (Primary) failed the update. And the Device1 i showing up in maintenance mode a...

Cisco FMC/FTD Breaking HA

Hi there, I got a Cisco vFMC with two Cisco Firepower configured as HA pair. At present the Secondary unit is Active. We got an issue with the Primary unit and have to perform factory-reset. I got a couple of questions: 1) Do I have to break the HA ...

IOS XE 9300 WLAN September Security Updates?

Which version of IOS patches this advisory?Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability I can't find any IOS XE version released around the date of the advisory. The newest version I ...

Using ASA management interface for SNMP and NetFlow traffic

We have two ASA 5525Xs who's management interface is on our OOB management network (172.16.8.0/22). Until now, the ASAs were sending SNMP (for port traffic) and NetFlow traffic to a server (172.16.4.45) on one the ASAs standard interfaces (172.16.4.0...

VPN tunnel does not traffic

HelloI created a site to site tunnel. The vpn is up but the truffic does not pass. Attached the logs found.Cordially

Network Security

Forum Posts

Resolved! Firepower: Is it possible to allow the execution of a single file?

Firepower 4000 Change management interface to another port

ASA5516-X: Usefulness of the AgentService.exe process

FMC Insider Threat/Malware Detection Across the LAN

Resolved! Packet tracer with firepower application IDs

Resolved! FTD Nat Question

Wildcard domain matching on the FTD

Resolved! Adding pre-configured FTD to FMC

Resolved! Is it possible to move existing rule into prefilter policy within FMC

Resolved! Native Vlan mismatch

Lost one of FTD device in HA Configuration

Cisco FMC/FTD Breaking HA

IOS XE 9300 WLAN September Security Updates?

Using ASA management interface for SNMP and NetFlow traffic

VPN tunnel does not traffic

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Configuring OKTA SAML on FTD 7.2.5

Palo Alto to Cisco Migration Tool count_summary error

Dynamic Split Tunnelling - Android Devices

compartilhar internet com VLANS firepower asa

HOSTSCAN modo Monitoreo en Firewall ASA 39 / 5.000 HOSTSCAN Monitoring

How to - ASA trustpoints must be manually migrated to the management

FMCv in Azure Hosting Multiple HA Clusters and License

please help me configure TFTP access-list on ASA for device management

Firepower 3105 - System boot up has failed

Cisco FTD and Cisco FMC images in CML