Hi all, I want to test my IPS Appliance Firepower 7120 whether can raech to my Syslog server in different subnet by using Ping. So, I ssh into the Appliance but I cannot find a way to exceute the Ping command. Below is the information on the Applianc...
Forum Posts
Resolved! Failed Deploy from FMC causing Outage
Created a new vpn policy the other day and pushed it to a pair of appliances, but when i did the deploy failed and as a result faced an outage briefly on the network. Modified the configuration, redeployed but same results (failed plus an outage). ...
Resolved! FMC Warnings
HICab anyone tell me whats causing the below please and possible fix . also below warnings are some tests I ran which were succesfulThanks May 13 07:29:36 CFMC-01 SF-IMS[12342]: [12363] CloudAgent:IPReputation [INFO] The curl option for ip verify_p...
Hi all, Im unable to block Youtube over Chrome, however Firefox and Internet explorer are blocking it. Following are the SSL and ACP snaps for you. Please assist.
Hi Team, We've setup a temporary FMC on Google cloud to migrate from 5525 ASA to Firepower FTD, the configuration has been migrated successfully via the migration tool. However, we are unable to deploy the policies onto the FTD. Please see the atta...
I've been asked to gather documentation that proves that automatic snort downloads that are scheduled are checked via FMC prior to being downloaded. They are asking to see if the hash is checked prior to installing the new .vrt file into FMC. Can any...
Hello So I am having some issues deploying NAT... My FPR1010 has a WAN (outside) IP 207.108.121.X which has a LAN (inside) 192.168.1.0.I have NAT on INSIDE for an Internal Network (connected to a SG550) which is 192.168.5.1-192.168.5.55The 192.168.1....
Hello, we are testing SAML authentication and we can't get certificate authentication to work.Currently, we are using AAA + Certificate authentication. we are on version 9.17(1) with an Anyconnect client on version 4.10.0208 There is an incompatibi...
So there were 2 Cisco ASA 5000 series boxes and their failover lan and state interfaces were connected via 2 C9300 switches. FW1>>FailoverLAN>>>>>SW1>>>>>Po1<<<<<<<<<<SW2<<<<<<FailoverLAN<<FW2FW1>>FailoverState>>>>>SW1>>>>>Po1<<<<<<<<<<SW2<<<<<<Fail...
The reachability of each interface can be done from either leg, still my asa failover is in failed state. Below is the show failover result from secondary leg (acting as active box)Failover OnFailover unit SecondaryFailover LAN Interface: failoverlan...
Hi All, Do you know if there is a way to redistribute EIGRP into BGP in Firepower FTD?I configured EIGRP, BGP and redist BGP into EIGRP.But couldn't find a way to redist EIGRP into BGP. Regards, Umut Yasar
Hi sir I use an IP 134.251.87.253 134.251.87.254 as a server IPs behind the firewall ASA.Both servers' gateway IP is 134.251.87.237, which is a port IP on the ASA. I can ping 134.251.87.253 134.251.87.254 from the ASA.But from other subnets, I can o...
Hello, I have an ASA5506-X that is currently loaded with a Firepower. I would like to have only one ASA running on it and would like to upload the IMAGE to it. unfortunately no command works for me, because always error messages are displayed.If I wa...
Dear community, Am facing an issue were a user is in the Domain Users group, a group were i stopped YouTube and media streaming, but I found a User to be able to access and use YouTube. Checked the user and is in the same group as the other Domain ...
Hello,I use FMC 7.0.1 and I want to have SSL policy with source country.I am trying to decrypt port 443. But SSL policy with source country doesn't work and traffic matches with SSL default policy.When I change same rule source with IP address it wor...
