Dears,I have 2 firepower 1150 will be configured as HV. i need to connect with f5 load balancer. my quation is where to put F5 before the firewall nd facing internet or after my firewall? i will put my servers in DMZ
As the title says, I have a VPN ikev2 tunnel from a Fortigate to a Cisco ASA, but the snmp/ping anything doesnt work on the inside. Also I saw in Forti logging that the traffic is going over tunnel, but on the ASA I don't see any packets on sh cry ip...
Hello, We have cisco sg300 switches (switched network/ LAN), and we are collecting interface statistics data such as in/out octet, unicast, multicast and broadcast for each switch and each port of the switch.Can we detect sniffing attack on the switc...
Hi Guys, I hope you are doing fine. I have a question regarding Logging configuration in FTD. As you may have observed, in Policy section there are two possibilities where you can edit Loggings:1- Policy > Access Control > Logging2- In each specific ...
I have several servers that use the same wildcard cert so I created a network group object that includes all these servers. In the SSL policy I reference the group object in a "decrypt - known key" rule. This worked pretty well until one of the se...
Hi all, I am interested to monitoring the reputation of some IP that we use to send mails.Is there any API or some way to get the reputation that can be consulted from cisco talos to monitor it?We think in take the parameter (good, neutral or poor) f...
Good Day Techs Reaching out for some advice We are getting error on one of our firewall: ERROR: CP 0x84 Memory Test() failures detected !!ERROR: Memory Test() Inspect DIMM !! Wondering if it is worthwhile to try to reseat the memory module? Or contac...
hi,i got a pair of ASA FW currently in production that doesn't have the 'failover key' configured.i would need to add the said command but quite hesitant that it might "break" the FW pair.is it "safe" to add this command in the primary/active FW and ...
Each year during holidays, management has deployment of signature updates (VDB & VRT) in our Firepower setup on hold (Change Freeze) due to limited team members on hand in case of issues. We recently deployed VDB update 350 to the FMC but then notice...
We have a question in reference to conducting scheduled backups on the Cisco 4145 Chassis. Under Configuration, you have the Scheduled Export setting to specify how often to run the backups. However, as no time selection is available, how does the ch...
We've recently installed a few Firepowers (FPR-1010 and 2100) that are managed through CDO. Our Firepowers that are managed by FMC are backed up to our company's SFTP server, but I don't see where the CDO-managed Firepower backups are maintained. Are...
Hello,I have the following case: ASA1 has a tunnel made and NAT to another ASA2.I must add another ASA3 to ASA1, which must be tunneled and access the same resource from ASA1.Warnings: there should be no connection between ASA2 and ASA3 networks.How ...
Hi allIs there anyway to filter Access Policy Control rules in FMC (6.5.0.2).For example filtering to show all rules regarding to specific source zone.Regrads Seek
I have a firepower 1010 managed with FDM. I have a default config with routed interfaces. Shouldnt the interfaces route between each other by default if they are in the same security zone? The only think i can think of is that I have my fiber mode...
Hi, I am having problems with the ASDM IDM launcher contacting our firewalls. I believe I have installed the updated version of the launcher relevant to our ASAs which I downloaded from the firewall itself via a browser. However when I try to launch...
