Hi I'm looking for some help. We have deployed both Client VPNs for Remote access by Staff and WebVPNs for support access by 3rd parties on the same ASA. We are using Aliases as a method of 3rd parties to choose their "profile". However we have notic...
Forum Posts
Dear All I want to integrate TrendMicro Deep Discovery Inspector (monitor all network ports) with Cisco ACI. So that all network traffic of ACI can be monitored by TrendMicro Deep Discovery Inspector(DDI). Anyone can help or has exprience using Tren...
Resolved! SSL security issue at router
Hi We have a router and do not know why we started to receive security warning. Below is the info we received. Now it has ip https enable and http disabled. If we disable the https, it should resolve the issue? Any other solutions? Thanks SSL Versio...
Resolved! FMC Geolocation update constanly
FMC 4500 appliance set to auto download and install Geo location updates. Task notifications keep stating that the download and install were successful but the FMC file in use is not the same as the "installed" version. FMC continuously attempts to...
Dear Community, I was noticing that all of the timestamps for the syslogs coming from my FTD devices and being sent to my syslog servers are in UTC time zone. Is there a way to change the timezone in the FTDs so the logs in my syslog server will refl...
Resolved! IPsec Failover
Hello community, I have created a ipsec with two ASA both location having 2 ISP link. I have down NAT for both side. what command need to put on both firewall that will activate failover. once primary ISP down them secondary.should be up.. Sumy,
We are currently backing up FMC and FTD's daily and have been for about 3 years. Fortunately, we've not had to restore due to a failure, but we have done restores just to check things out. We would like to go through the entire process in a lab where...
Hello Champs,Can we secure SF300 and SG300 Switches with F/W ver 1.4.11.5 using SHA-2 against weak KEX and MAC algorithms ?What are the commands to execute ?If this can not be done for SHA-2, Can we secure SF300-24 Switch with F/W ver 1.4.11.5 using ...
Resolved! FTD version 6.3 VPN
hey folks does anyone know we running FTD 6.3 FMC 6.3 and trying to create a certificate DN for authentication is the possible? Thank you.
Resolved! Not possible to register firepower 1120
Hello,I have firewpower 1120 managed from FDM.Few days ago I had to erase the configuration. I skipped the initial configuration and made update to version 7 from 6.6Now I cannot register the device, because each time when I try, I receive following ...
Resolved! enable secret line
if i am putting this command on router, router is not allowing me to login. i need to crack password , so i am asking "why we can't login in router is there any other option to login then please tell me either there is anyone option to crack your pas...
Resolved! Blocking hashes in ASA
Is there any way to block hashes on ASA5516? I know there's a way on FirePower.
Hello Experts, I need to know where on FMC I can configure the "threat-detection statistics tcp intercept" for an FTD. I have this configuration on ASA and I want to replicated on the FTDs. threat-detection statisticsthreat-detection statistics tcp...
Resolved! Snort Rule Update
Good morning, I notice each time I log into my FMC, I have a deployment task pending. Upon checking the task details, it's always the rule updates that have been downloaded but not applied to my FTD appliances. I have to manually deploy this eac...
I am using PT v8.0.1.0064.Problem: Every time I open up a pakcet tracker .pkt file with a Cisco ASA, the ports will always be set to "Administratively down", even though I `no shut` them previously, `write mem`, `copy run start`, and saved the pkt fi...
