Dear community, I want to upgrade Snort 2 to Snort 3 in a HA FTD setup. Can someone tell me the process without causing downtime? Second use case is, Upgrade of Snort in a Active/Active Setup also? Any information would highly be appreciated. Tha...
Hi,I am trying to use 1:1 Static NAT on NAT enabled device.There is a firewall behind the NAT enabled device, which will have IPSec setup.Do I need to set up NAT-T(Traversal) on the firewall in this case using 1:1 Static NAT??As far as I understand, ...
Hi guys im trying to update my ASA 5508-X to the version 7.0.0 as i need to update this so they can work the site to site vpn with a Firepower 1010 however is not able to do the update im using the system upgrade procedure and i already upgrade the ...
I have setup a site to site vpn up between a Cisco ASA 5508-x and a Cisco ISR 4531. The tunnel is showing up but I cannont ping between the tunnels. When I ping it goes out one hop and then I get the !N. here is some show commands from the ASA and R...
I'm trying to setup an etherchannel on my ASA instance (version 9.17.1) that is running on a Firepower 4112 (version 2.11(1.154). I've managed to create the etherchannel via FCM and this is being presented to the ASA okay, but I have no options to pe...
I would like to know how the vulnerability network graph works on fmc. Does it actively detect operating system vulnerabilities?
Hi CSC, Reading the following from the Firepower configuration guide (in bold) So If I had a rule within my ACP and attached a file policy matching FTP/Block Malware is this saying that unless my default action is IPS/Drop Inline then matching traf...
We were hoping to get some feedback on why a router would show ports open on the public facing interface when they are not running on the router? They are not specifically closed. Nat is configured in a manner that would not allow a connection throug...
Hello,I am facing some problems when try to I deploy from FDM. Until couple days it worked well, but now everytime I receive this error " Deployment has failed. Deployment failed for an unknown reason. Please try deploying changes again. If the probl...
Hi, for a customer i'm trying to authenticate anyconnect using an AD, but i can't get it work. On the Cisco ASA is see the following messages: Mar 23 15:02:07 [SAML] consume_assertion: The identifier of a provider is unknown to #LassoServer. To regis...
Hello,I am trying to allow web access to an inside host but for some reason it is getting blocked. Packet-tracer hits the implicit rule (deny all) and drops the call. It seems the ACL rule is not being used. Not sure what I may be missing.This is wha...
Hi Team,Greetings to you all, I have a customer with FPR 2140, Running FTD OS v6.6.5 (managed by FMCv),when I check the Cisco Software Manager,it's not showing the Serial Number of the FPR 2140/FTD, it only showing the FMCv (which is because of the F...
Hello everybody, because the Cisco Field Notice: FN - 72332 - Firepower Software: Cisco Talos Security Intelligence Updates Might Fail After March 5, 2022 - Software Upgrade Recommendedhttps://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72...
Has anyone successfully deployed Cisco VPN Remote Access Using Azure AD with Radius Authentication. I have a RA vpn setup where it authenticates with Radius and its working fine but now I need to make use of the Azure MFA as well.
Hi folks,Why telnet is not secured and why SSh is secured? Regards Thanveer "Everybody is genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is a stupid."
