Is there a way to apply the same change to multiple rules within an access control policy?Recently I had to enable logging on every single rule withing an access control policy and now I have to enable the IPS policy to every single rule. Is there a ...
Forum Posts
I have a Cisco ISR 4431 with an extended ACL using network/service groups. One of my network object groups is called Abused_IP and I normally add in hosts/network which I suspect is doing port scanning etc when I go through my netflow analayzer. This...
Hello,Have two 3130's. Set up individually and then set them to do HA. Come to find out we are going to use SFMC. SFMC requires the HA can only be enabled AFTER the devices are connected to it. I broke HA and expected the original IP I used for the s...
Resolved! Juniper to Cisco ASA
Hi 2AllWe are moving from Juniper Firewall to Cisco ASA.Are there any config migration tool from juniper to Cisco.Are there any cisco ASA simulator to get some hands on.Is it recommended to have 8.3 or 8.2 software version on ASAAny recommended books...
Resolved! FTD with multiple Outside Interfaces
Hello,FTD's 2110 running 7.4.2.1 in HA. and ultimately trying to setup a site-to-site vpn between this FTD pair and anther FTD pair at our other datacenter. However, right now I'm just trying to route plain old internet traffic out of my second outsi...
Hello everyone, I'm having a situation at a client which previously (1 month ago) had a FMCv 6.2 version whis was working fine untill one night. For some reasons the database of the vm has crashed and we had to rebuild the vm (no problem here - life'...
Resolved! Cisco SNS 3755
I am trying to use the fiber connections on the SNS 3700 but I am unable to ping the appliance. The ip address is configured on the appliance on port 0 but the appliance is shown to be connected to the switch on port 2. Is this correct or is there so...
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy19415 -> Is this a default behaviour of FTD Devices in HA Pair ?Active Secondary FTD device is sending syslog messages using the hostname of the Standby Primary device
Resolved! FTD SSE Connector Service down
Hi to all,i am running a pair of FTDs in HA. They run 7.2.8.Suddenly the backup pair started announcing that the SSE Service is down (please see attached png for FTD-2).The primary FTD (FTD-1) works OK and the SSE Service is user disabled as i have d...
Hi all, Now we are using RA VPN in Different firewall ,Will enable RA VPN In FTD manage by FMC Flow -External user -Permitter firewall FTD -RA VPN firewall FTD - AAA-Cisco ISE -Mostly Authentication -Certificate + OTP Now our main concern is how ...
Hi, I am moving from 5506x working in asa mode to firepower 1010 in ngfw mode. It is being used in a remote location mostly to protect web servers in a datacenter and I want to monitor the temperature of the unit (Munin is charting the data). For 550...
Good morning everyone,I recently installed a CSF 1210CE FTD on which I configured two external interfaces to use two ISPs with two different public IP addresses.I then configured two default static routes with metric 1 for the main one and metric 5 f...
HiI need really urgent help. I upgraded our Cisco FTDs to new recommended version but one of them get failed and now it can't boot to system. Even I don't have access to COM and enter to ROMMON mode for recovery. It looks like entire OS failed and bo...
I'm trying to configure macec encryption between a cisco Catalyst 9300 switch and a server that is running Linux (red hat).I tried to combine guides from red hat and cisco to do this but so far no success.For the cisco side I used this guide. For the...
Hello Team,I have topology as attached, I have introduced another interface on the ftd [172.16.40.25] . this is where have configured the new tunnel to the branch site. on the asa have natted 41.206.58.2> 172.16.40.25 on 4500/500 services. i then us...
