I have configured around 300 rules in FMC.. a recent requirement is to apply an IPS Policy to all the rules..is there a way an Intrusion Policy can be applied all at once to an entire ACL ? its really inconvenient to edit 300 rules and apply an IPS P...
I have only one operational DC from where user Agent are getting userid/ip mapping info. Even though there are 1 other DC added at User agent but other 1 are part of Test Site. How to confirm which dc actually providing user id and ip mapping to th...
We are using one test gateway (VPN-12345) for test purposes before changes are applied within the production environment.All getaways except VPN-12345 are production gateways.In the VPN-12345 we are testing the VPN Management Tunnel, which is availab...
Hi Friends, Help me with the below question. 1. Is there any show commands in ASA to find the object-group of an IP address.2. Or Suggest some possible ways to find an object-group of an IP address.Because if try "" sh run | in 1...
Need to know whether TCP is connection-oriented or Connection- less service?
As of early this morning around 4A Central, FMC is blocking updates from 23.220.206.79 with a URL of updates-dyn-talos.sco.cisco.com. anybody else seeing this
Dear ExpertsI m running ASA 5525-X with OS version 9.2, there was an audit in the network and they found some vulnerability on the 9.2 OS, i would like to move to FTD firewall and chosen equivalent 1120 FTD, i will upgrade to the latest software befo...
I am looking to integrate my Cisco Secure Web Appliance with Cisco ISE.. i.e. for portal login only via local Network User Accounts in ISE.Is this achievable ?any help is appreciated.
We have the following devices for our company VPNs:* Concentrator: Cisco Adaptive Security Appliance Software Version9.8(4)40,* Client: Cisco Anyconnect version 4.9.00086We have already implemented split tunneling with a couple of subnets that go thr...
We are using the physical Firepower with the FMC as a virtual server. Cisco Firepower 1140 Threat Defense (78) Version 7.1.0.1 We did a Firewall update in past and renewed the Certificate. Seems like it worked well, and our AnyConnect Clients can con...
Is the User Agent still an option to use in FMC version 7.2.0 ? I thought I read somewhere that it was being depreciated in favor of ISE but I really only need the user agent and hope CIsco hasn't done away with it.
my company is used the asa 5510 firewall, but the company is bought the firepower 1120. i can configuring this device with the device manager and the cli. i need help, on the asa 5510 i can show running configuration from the cli, but in the firepowe...
Guys I am having the strangest issue with all 3 FTD's where I assign 192.168.3.1 to port 1/1 within FMC. There is no subinterface etc it is a IP address assigned to the physical port. If i plug into an unmanaged switch I cannot ping 192.168.3.1 while...
Hi everyone, I'm setting up a MERAKI mx85 for two sites and one of requirements if setting up site-to-site vpn connectivity on both sites. Do we need to have both MX to have static IP address as requirements for this to work? Regards,R
Hi We access network devices via ssh. I can see "PublicKey" in SecureCRT. Please see the below screenshot. My question is since it use PublicKey, does the private key get involved in the process? Is this PublicKey the same concept as OpenSSL? Thank...
