In FTD, while the file is being analyzed in the sandbox by ThreatGrid, when happens to file in transit?Please let me know if this is correct:If the file policy rule action is "Malware Cloud Lookup", I believe the file is sent to the end user and a ma...
Forum Posts
Hello everyone. Please, someone help me?I'm a problem for installation of the image cisco any connet in FTD Firepower due to the use 100% of partion /dev/root: Filesystem Size Used Avail Use% Mounted on/dev/root 3.7G 3.7G 0 100% / I alread clean sev...
Hi, I need to create Outside ACL with Office365 wildcard domain in order to filter outside -> inside connection. Is possible to do that? I know that 5525X does not support Wildcard Domain.Thanks a lot
i have the firepower 1120. i configured my device for access to internet from DMZ zone and to access to my web server, but with default action allow. when i set default action BLOCK, and i create NAT: manual for accesss dmz zone to internet and autom...
Resolved! Local AAA Not Working
I'm trying to use local AAA to set up credentials for console and VTY. After applying the following commands I can no longer log into the switch. It disconnects me after several failed attempts. Can you tell me what I am doing wrong? aaa new-modelaaa...
I am starting to convert our ASA 5516x over to FTD image. Since we have 12 different sites I have to setup Site-to-Site VPN for connectivity. This is simple and I have it working, however I am wondering if I can put all the NAT objects into 1 Group...
Hi I'm trying to configure a site-to-site VPN between three routers one of which is passive with multiple ACLs and I'm having a bit of a meltdown. Some of the ACLs work , the VPN works If I don't apply the ACLs as soon as I apply the ACLs it stops w...
Hello,I pushed the configuration from the Migration Tool to FMC, I'm doing ASA to FTD Migration. Now the pushed-config is sitting there on FMC waiting to be deployed. But now I don't want to push the config, instead clear or discard what's there for ...
Hi Just a simple question when using numbered ACLs is there any significance to the number or should it just be within the specified range for your class of IPs? For example ACL 110 should it be used for a significant purpose? Thanks in advance
Hello, I want to enable reverse-path (URPF) on Cisco ASA in my current networkDo i have to add default route to avoid any issues after enabling Reverse-path (URPF) or any other method ?what are the prerequisites before enabling URPF ? Thanks in advan...
i have the firepower 1120. i configured my device for access to internet from DMZ zone and to access to my web server, but with default action allow. when i set default action BLOCK, and i create NAT: manual for accesss dmz zone to internet and autom...
Hi All,I'm suggestion for our network. We have multiple servers in different location, connected to the internet by DMZ not in our control. Which mean all the outside IP's of our servers are unreachable.Eventually I would like to create S2S connectio...
I have stand alone FMCv and i plan to deploy FMCv HA setup , so please support me what are the requirements either software or License ?
Doing a bunch of testing with FMC/FTD and came across this article talking about inspection of packets that pass before traffic is identified. I'm testing this with ftp. My policy is very simple (picture attached). The traffic in question will hit...
Please remove.
