Network Security

Resolved! Another "(acl-drop) Flow is denied by configured rule" Issue

I have a Nexus 5k with a 10k sfp configured for vlan 800 along with another port also configured for 800. This goes into an edge router which then goes into the outside interface of an asa 5545 (had to do it this way temporarily because I did not h...

Resolved! FPR-2110 (ASA-Image): Correct option at image upload?

Hello everybody, I have been tasked to upgrade a HA pair of two FPR-2110 running rel. 9.18(4)22. I checked the upgrade guide (see screen dump attached):https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_...

Resolved! FTD Firepower 1150 active/standby failover link

Hi,The recommendation for failover link between two firepower devices in active/standby setup is to be the same bandwidth as the data interface.The Firepower 1150 has only 2 x 10 Gb/s SFP+ interfaces, the rest are 1 Gb/s. When using the two 10 Gb/s a...

Resolved! How to route VLANs on Firepower 1010

OK for the life of me, I cannot figure out how to route VLANs so that they have Internet access. Whether I choose Access or Trunk, I simply cannot get it to work. Online searches turned up absolutely nothing, not even the Cisco documentation could ...

Cisco FTD Anyconnect Certificate for HO and DR firewalls

We have two data centers HO and DR. We have VPN firewalls in both data centers and we are planning to purchase certificates to use for Anyconnect in these firewalls. I know that we can use SAN names in a single certificate (like ho-vpn.domain.com and...

Failover license

如何在FPR1010-NGFW-K9下实现故障转移许可证功能？需要购买许可证吗？还是附带相关订阅？

Cisco FTD Failover Behavior

Hello Guys, I am testing the active-passive failover in FTD. First of all the failover works fine for me, but I have query related to the timeouts I received during the testing. My testing process is as follows. Let’s say I have two FTDs, FTD-01 (pri...

Issues downloading a FMC troubleshooting file generated from CLI

Hello, I'm having issues login to the FMC GUI and need to generate a troubleshooting file from the CLI and send it to TAC. I have generated the file using the sf_troubleshoot.pl command from expert mode, but when trying to download the file from my ...

Resolved! Policy Set to block specific IP address after a so many failed logins

Our ISE environment only authenticates wired connections and passes VPN authentication from our ASA firewalls on to our Active Directory. One of our VPN firewalls gets brute forced hit pretty hard. Luckily it is with attempts with usernames we don'...

Cisco Firepower - icmp thru FW, inside to outside interfaces

I'm setting up a Cisco Firepower 2130 FTD, no FMC. This is for a lab environment.I want to be able to ping thru the Cisco Firepower 2130 from a switch on the inside interface to a switch on the outside interface and vice versa to check connectivity. ...

Resolved! Firepower 1120 SSD replacement procedure.

Hello,My Cisco FirePower 1120, does not boot due to SSD disk failure and at this point I need to replace it with a new one and I am wondering to know, how can I Perform a Complete Reimage of the new SSD disk.The ROMMON version installed is 1.0.25 and...

Route Offloading on FTD for IPSEC VPN

We have IPSEC VPN setup(HUB to Spoke), were clients access internet through VPN from Site to HUB(Data centre)I have a requirement of offloading a certain internet destinations towards internet instead of injecting through VPN tunnel, to offload it di...

Unable to SSH/TELNET/HTTPS to Management interface from outside network

I have a ASA 5585 with single slot (No IPS), Simple network, ASA Outside interface connected to Internet /Wan and Inside interface to LAN , ASA Management 0/0 is connected to LAN Access switch Management VLAN. I have allowed any any policy for man...

FTD Back-to-Back VXLAN

Hi All,I currently have 2 HA pairs of 4200 FTDs, 1 pair located in DC 1 and the other located in DC 2. The firewalls are used to terminate a number of VRFs that we operate within each data centre. All VRFs default to the local firewall. To avoid issu...

Resolved! Cisco ASA 5525 Maximum ACL Lines

Hello All,Could you please help me in finding out the maximum number of ACL's accepted in a Cisco ASA 5525? I am trying to add an access list which is worth more than 45K lines to block certain IP's based on geolocation. Would this effect the perform...

Network Security

Forum Posts

Resolved! Another "(acl-drop) Flow is denied by configured rule" Issue

Resolved! FPR-2110 (ASA-Image): Correct option at image upload?

Resolved! FTD Firepower 1150 active/standby failover link

Resolved! How to route VLANs on Firepower 1010

Cisco FTD Anyconnect Certificate for HO and DR firewalls

Failover license

Cisco FTD Failover Behavior

Issues downloading a FMC troubleshooting file generated from CLI

Resolved! Policy Set to block specific IP address after a so many failed logins

Cisco Firepower - icmp thru FW, inside to outside interfaces

Resolved! Firepower 1120 SSD replacement procedure.

Route Offloading on FTD for IPSEC VPN

Unable to SSH/TELNET/HTTPS to Management interface from outside network

FTD Back-to-Back VXLAN

Resolved! Cisco ASA 5525 Maximum ACL Lines

pxGrid session subscription missing radius accounting session Id

Modifiying FTD instance on FTD3130

Upgrade 7.6 -> 7.7 stopped media and ftp, is inspection the culprit ??

Model Migration - 4110 Native to 4225 Instance S2S VPN Configs

ASA upgrade procedure on Hyper-V

Cisco FMC Access control policy under default

AnyConnect MAC OSX exclude/include DNS not working

FTD Migration Question

License Help For ASA5510

Firepower EOS 1120