I have an ASA pair configured for active/standby failover. However they don't seem to be generating syslog events related to failover status. Do I need some specific configuration for this? Are some contexts simply unable to log these events?Conte...
Forum Posts
Resolved! Disable SSH Algorithms on CISCO Switches
Our CISCO 9300 Catalyst switch has a weak SSH algorithms like KEX and MAC ciphers. Specifically the ones listed below and replace them with non-deprecated algorithms. The instructions I have found have been misleading and commands are inaccurate. Any...
I am going through and doing some file maintenance/cleanup on our FTDs, and I have two directories that seem to have the same contents. I'm not sure if I need both, but all of my FTDs seem to be maintaining both sets of files:ls -la /ngfw/var/sf/upd...
Hi Community! I stumbled across a weird one I am still diagnosing with TAC, still TBD if we are hitting a bug, but during my research on this I stumbled across a interesting topic. LINA and SNORT both manage there own session tracking...
Resolved! Session TImeout in Firepower
I am using Cisco Firepower with FTD 1010 Version 7.0.5, I want to implement web session timeout and ssh timeout, I just seeking help in configuring through flex connet or any other?
Can we deploy segmentation policies for Server-less applications in AWS?I understand that there is an agent-less option using the cloud connector, which uses the AWS native Security Groups to enable segmentation in the VPC, does this work for server-...
Hello everyone reading this post,I am taking the first steps in FMC administration. I want to send syslog to an external server.I am using the Firepower Management Center Configuration Guide, Version 6.6 documentation... to be more precise this link...
I'm working on creating an SSL decryption policy, but I'm running into an issue where the "no decryption" rule is failing to prevent decryption.Interestingly, if I configure the "no decryption" rule using a subnet address, it works as expected. Howev...
We underwent a recent security penetration test, which revealed that the outside interface of our Cisco FTD firewall is listening on TCP port 443. According to the configuration, SSL (HTTPS) access on this interface has already been disabled. The FTD...
Hello everyone,I have a small ISE deployment consisting of two nodes in High Availability (HA) mode (primary and secondary) currently running on ISE version 2.7. I have been tasked with upgrading them to version 3.3, and I would like to share my curr...
Hello, on the old ASA FW I had ssl configuration for multiple domain... for VPN and Anyconnect use. If user wrote to Anyconnect vpn.domaina.example it matches correct certificate and Anyconnect client was without warning about untrusted certificate.....
Hello everyone,I need your advice on integrating Microsoft Authenticator (Azure MFA) with my Cisco Always-On VPN setup.My current setup:Cisco ASA with SSL VPN (AnyConnect Secure Client, Always-On enabled)Cisco ISE for authentication and authorization...
We have Cisco FTD 2120 and Cisco FMC 7.2.1In dashboard stopped sync infoActive session show 2 months agoIn Devices > Platform Setting > SyslogCheck "Enable Loggigng to Firewall Management Center"And in logging destination to Internal buffer: Filter o...
Hello,I have taken over the job of managing the Cisco Firewall at a company. It seems that the last person has not been updating the firewall correctly.Under 'Security Intelligence' I am receiving a 'Cisco Intelligence Feed' and 'Cisco-Dns-and-Url-In...
I'm testing an Identity policy on an FTD that uses Active Authentication via LDAP. This works OK, but I can't seem to find any way to manually clear authenticated user sessions down. I can't find it in the FDM help now, but I am sure it said the us...
