Hi Team, I would use my dashboard in FMC to monitoring the traffics interfaces of each interfaces in the FTD ... I get this : see images attached ..let's take the first interface"LAN", how i can get 1,107,868.42 KB while the LAN interface in FTD is 1...
Forum Posts
Resolved! How does FWSM work?
Hi buddies,There are tow FWSM modules in cisco switch 6513 and vlan-groups assinged to this modules like below:firewall module 4 vlan-group 10,100,200,300,400firewall module 5 vlan-group 11,600,800,1000and then valns asigned to this vlan group like b...
Hello! I have been under attack that keeps dropping my network connection. From the logs, it seems to be from a SYN-FLOOD. The source is sometimes 162.125.6.14 and other times it is 162.125.9.14.I have done everything I understand to do in the rou...
I've got issues with a Firepower Module on our system and will be re-installing it.I've researched the method and I've never done this before and would appreciate a sanity check to see if I'm missing anything before I go ahead and submit the change d...
Resolved! asa objects
Hi ,The above is object from ASa ASDM , some are shown in green and some are shown in blue What does it mean Thanks
Resolved! CTS & SGT behavior in C9K environment
Hii want to share my experience of deployment of CTS/SGT in campus built with C9Ks & ASA 5516X as WAN-edge router.C9Ks run 17.3.3 , ASA runs 9.12 . Simplified topology:To clarify on notes: on the ISE all C9Ks & ASA are configured for TrustSec, pac-pr...
I need to turn on FIPS to be stig compliant.In my asdm, i can go to a FIPS page and it is unchecked.If I check it, i understand that it will use higher grade security measures but should I be worried about everything breaking if I do? Thanks for any ...
All: What the latest status on DECRPC inspection of MS Windows RPC DCOM on ASA platform? There is discussion as far back as 2010/2011 (12 years ago) that the functionality was entirely broken with the latest versions of the protocol library from Mi...
Hi, I am using Nagios to monitor our windows server using WMI. So I configure the DECRPC on our ASA 5520 firewall but i still see the deny on port > 1024. Below is the configuration: class-map MSRPC match port tcp eq 135!policy-map type inspect...
Hi All, Planning to upgrade ASA 5505 from 8.2.5 to the latest stable version. Want to know the interim upgrades before latest stable version and link to the upgrade tool. Regards,Surya V
Hello -- Here's the situation I'm trying to figure out. I have an ASA5506 at SiteA 10.10.1.0/24 and an ASA at SiteB 10.10.20.0/24 with a site-to-site VPN between the two sites. This works perfectly. Also at SiteA, we have a managed service we pay for...
Hi, Does anyone know where I can find this information? We are trying to design a NextGen DC and it's one of the requirements. Thanks,
Resolved! SGT assignment on C9300
Hi Gentsi've setup campus with ISE-driven SGTs (not SXP). Canmus's NADs & FW r configured for TrustSec on ISE. They get authorized & pushed back with SGT-map configured only for this campus on ISE. Something like belowis visible on the switches with...
With Madhu KodaliWelcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to discuss configuration and troubleshooting IDS/IPS sensors with Cisco expert Madhu Kodali. Madhu is a senior QA engineer on the Intrusion Pr...
I have ASA 5525 Version 9.4(3)12 with DCE/RPC inspection enabled. I am unable to do RDP or join systems to domain getting the error as "DCERPC request non-standard major version 3 from" When I disable DCE/RPC inspection, everything works fine but...
