So I'm new to FMC and I'm trying to get a grip on how things work. I have an intrusion alert that keeps coming up. "HI_CLIENT_DOUBLE_DECODE (119:2:1)"Problem is, it keeps alerting on non-malicious traffic (all internal traffic). How do I turn off thi...
Forum Posts
Resolved! Vulnerability in router C2921
Hi We have a router C2921. When tenable scan vulnerability, we got the following info. Not sure if its vpn configuration issue. Anyone can provide suggestions to resolve it? Thank you of a VPN gateway and gain unauthorized access to private networks....
We recently updated FMC and our FTD's to code 7.x. Are we able to build rules using MAC addresses yet?
Resolved! FTDv evaluation in FMC
Hi community,Is it possible to force FTD virtual that's managed over FMC be in evaluation mode or consume evaluation license from CSSM On-prem while other FTDs managed over FMC are running and consuming threat / url / malware licenses already? Thank...
We had a Cisco ASAV Standard Package virtual appliance installed in our AWS environment and there does not seem to be any available way to obtain the latest software OS to update the OS/firmware. It requires you to have access via Cisco.com to downl...
Resolved! ASA-AWS firmware version upgrade
How can I upgrade the firmware version of an ASAv running in AWS? I don't want to rebuild a new instance from scratch. So, is there a way to proceed with a simple upgrade CURRENT RUNNING VERSION = 9.6.2.1AWS AMI LATEST VERSION = 9.9.1.2 We have a...
Hi,I have two separate local network (old and new) and I put Cisco Asa between them. "New" network is inside network and "Old" network is outside network and I allow access for all subnet from new to old.Now, I want allow access from one host from ou...
Resolved! Allowing Ports to a host in cisco asa
Newbie question, please help.access-list OUTSIDE extended permit tcp any host 10.1.1.5 eq www This command will allow outside host to access internal host with the corresponding ip using the port 80, is that correct? Thanks in advance.
Hi all,I have a 4321 router that functions as a ZFW. I have configured zonesGi0/0/1 --> insideGi0/0/0.1 --> TEST. The TEST zone has dhcp relay commands configured, but I cannot get any end device behind the TEST zone get an IP address via our DHCP se...
Resolved! SubInterfaces on an ASA
Is best practice still to either tag nothing or tag everything on an interface on the ASA? As in, either leave it as an untagged and then pick the appropriate vlan on the downstream switch: GigabitEthernet0/2nameif insidesecurity-level 100ip address...
Dear sir, I need to upgrade openssh on cisco fire linux os, because founded vulnerability.but yum update, apt-get command is not heard.please inform me that how to upgrade openssh. My fmc os and openssh version as below. thanks,
Software Version 5.4.1.6 (build 40)OS Sourcefire Linux OS 5.4.0 (build126) Hello! I have a problem! I hope for your help! When a try to apply settings to Sensor in FireSight - i have error - "Unable to connect to DB". FireSight and FirePower see ea...
adding route into the asa
Have private IP address on FTD Management.. NAT is though a Cisco 5510. The FTD is managed fine, but when trying to upgrade, the readiness check fails with Status Log:Readiness Check To 192.168.77.112 Failure, Got ExceptionTCPdump and 5510 log sho...
Hello All you Cisco Fans,May i please know which CISCO Sandbox lab should i select to reserve if i want to practice Firewall ASA commands.Thanks in advance. Piyush Verma
