We underwent a recent security penetration test, which revealed that the outside interface of our Cisco FTD firewall is listening on TCP port 443. According to the configuration, SSL (HTTPS) access on this interface has already been disabled. The FTD...
Forum Posts
Hello everyone,I have a small ISE deployment consisting of two nodes in High Availability (HA) mode (primary and secondary) currently running on ISE version 2.7. I have been tasked with upgrading them to version 3.3, and I would like to share my curr...
Hello, on the old ASA FW I had ssl configuration for multiple domain... for VPN and Anyconnect use. If user wrote to Anyconnect vpn.domaina.example it matches correct certificate and Anyconnect client was without warning about untrusted certificate.....
Hello everyone,I need your advice on integrating Microsoft Authenticator (Azure MFA) with my Cisco Always-On VPN setup.My current setup:Cisco ASA with SSL VPN (AnyConnect Secure Client, Always-On enabled)Cisco ISE for authentication and authorization...
We have Cisco FTD 2120 and Cisco FMC 7.2.1In dashboard stopped sync infoActive session show 2 months agoIn Devices > Platform Setting > SyslogCheck "Enable Loggigng to Firewall Management Center"And in logging destination to Internal buffer: Filter o...
Hello,I have taken over the job of managing the Cisco Firewall at a company. It seems that the last person has not been updating the firewall correctly.Under 'Security Intelligence' I am receiving a 'Cisco Intelligence Feed' and 'Cisco-Dns-and-Url-In...
I'm testing an Identity policy on an FTD that uses Active Authentication via LDAP. This works OK, but I can't seem to find any way to manually clear authenticated user sessions down. I can't find it in the FDM help now, but I am sure it said the us...
Hi,we're actually running several types of FPR 1010, 1120, 1150, 3110 (in Multi Instance mode) with FTD v7.2 up to v7.4- all managed by FMC 7.6In FMC Platform Settings different policies are assigned for the Regions (EMEA, APAC, Americas) with indivi...
Hello, When I log into https://tools.cisco.com/sch/, I am prompted to accept a license agreement, however when I scroll to the bottom of the page to Accept the agreement I see the following error:Click Accept Error Your connection has timed out. Plea...
Good day all,I am trying to size the instances of a new multi-instance Cisco Secure Firewall 4225 FTD deployment and I'm confused regarding the amount of CPU/cores I can play with. The documentation states that the device has 128 cores and that the m...
Hello!I can successfully connect to the VPN using Remote Access and access all hosts in the 192.168.100.x subnet.Now I'm trying to manage the FDM remotely. After connecting to the VPN, I attempt to access the FDM's data interface IP (192.168.100.1), ...
I am trying to upgrade the firmware on ASA's we have at multiple sites but for some reason copying over the firmware fails. We are currently running FP2140's in ASA mode and whenever I copy the files over from a windows machine, it fails. I am using ...
Please find attached diagram and let me know can i integrate my Ftd with Cisco UmbrellaNote-: Here my Ftd will act as a internal firewall and Cisco umbrella will not integrate with Meraki MX due to license limitation. Cisco Umbrella has dns advantage...
Resolved! object IP's in ASA
Hi ,We have multiple objects part of an Object-group in Cisco ASA, and wonder if there is any command that we can run to get all the IP addresses in that object-group instead of running sh run object id object-name for each object separately?please ...
Is there any automated method to migrate from Forcepoint firewall to cisco firewall
