I am looking to upgrade our FirePower 4112 managed with FMCv and was looking through the compatibility matrix and direct upgrade paths. https://www.cisco.com/c/en/us/td/docs/security/firepower/upgrade/fpmc-upgrade-guide/compatibility.html Would i be ...
Thanks to @Rob Ingram for pointing me to this LINK the other day. That said, I'm confused with Step 8 forward. Specifically, if I'm going to manage the FTD via a data interface (outside interface in this case), why would I care about the management i...
Can a Cisco ASA5525X do MSDP and if so is there a configuration document?
Hallo, i have Cisco ASA 5515, and its Eol and EoS is on 2.Aug 2022, because of that i wanna go to new appliance from Cisco. I checked in Cisco but they said that there is no replacement for this product. What i can do with it?!!!! https://www.cisco.c...
Hi everybody I have operate Cisco asa 5506 with aaa settings. I use linux tac_plus server.It semms to be work well, but very slow. If I stop tacacs server the login stop inmedietly with tacacs user, and I can login with local user. Nice.If I start a...
Hi, We know that Cisco supports anyconnect over SAML, but does OAuth also supported? If yes, how to confiurate it on cisco asa. I dont see any as such config document. Please need a quick response. Thanks in advance.
After reading the NGFW Policy Order of Operations guide here, https://www.cisco.com/c/dam/en/us/td/docs/security/firepower/Self-Help/NGFW_Policy_Order_of_Operations.pdfI am even more confused about how the firepower device processes rules. According ...
I have FMC 7.1 and want to reduce my ACL. When I tried to add a network with a wildcard mask of 0.0.255.63 to the list of network objects, I got the error "Invalid IP Address". At the same time, a network with a wildcard mask of 255.255.0.63 is creat...
Hi, I just currently got a scenario that two ASA with perpetual RA license, is it possible to transfer onto new FTD 1140 with new smart account?
hello ,i have a Cisco 5525 with firepower , i've added it to my FMC .and every time i add a new access policy and hit save and deploy i can't edit it anymore and i can't place another rule above it .i can only view the settings of the rule.i can't de...
Hi,we're in the process of implementing TACACS+ AAA on our routers, during the process, the security team noticed that on IOS-XR the only option to encrypt such a key is type 7 which, is easily reversed. I've followed this up with TAC and the enginee...
Hi We have switch c3850/ver 03.03.01.SE. Now some insecurity message (Please see the below) is sent to us from tenable. The device has the below two commands. Are these two commands is the reason for the insecurity? Thank you ip ssh server algorithm ...
I have a FMC 1000 ver 6.6.5 and FTD 1120 ver 6.5.5.is it possibile to cofigure via flexconfig PBR to route different subnet towards 2 different ISPs?(i don't need reachability control, only source based routing).Many tksJohnny
Good day, I can't really get any further.We have set up both an acl and custom attributes for dynamic tunnel exclusions.In order to reach the local VM on the host, we have stored a private 172 IP range inside our acl for the tunnel exclusion.Unfortun...
Hello. I need to configure SNMP for Cisco Firepower 2110 to communicate with our Zabbix server. How do I do this? I cannot find any way how to enter the Zabbix server's IP address to Cisco Firepower to make it working. Thank you for your help.
