Hi all, in order to do any troubleshoot in firepower FTD 6.4, but at this point any version, in which sequence are these 3 things executed? NAT/Routing/FW rule Thanks Davide
Forum Posts
We are renewing a Digicert Identity certificate, and we get "Error: Import PKCS12 operation failed. Base64 decode failed. Our certificate SME insists the cert is good as he can convert the pfx to a pem (base64). Does anyone have an ideas for me to lo...
I have an FTP server setup that I'm testing out. I want to allow PORT connection requests to be made to the server. The server is on a local LAN that is behind the firewall and I have the following set up for it... I have created my NAT rules using...
Is it possible to extract FMC Logs to a different system ?
Good afternoon,I have a Cisco ASA 5506 on a Spectrum Ubee cable modem. We have a block of 7 static IP addresses. We are using 4 of the addresses. One is the primary IP of the router which allows client internet access via dynamic NAT, as well as re...
Hi, Just a query on this. We are upgrading from a 5505 to a firepoewer 2100 with ASA platform on it. Basically i have migrated as much of the config as i can with a few minor amendments which wouldn't take in the new setup. We swapped over to the ne...
Does anyone know if it is possible to forward LINA/FTD messages to Azure Sentinel via the e-Streamer eNcore? I have successfully setup the service to forward my FMC connection events but I also want to forward messages from the traditional ASA platfo...
Hi ,i would like to ask about X-XSS-Protection.Can we disable X-XSS-Protection in ASA webserver ? for eg. X-XSS-Protection:0 ?
When I launch the ASDM, whether in JAVA or as an MSI installation, the window starts "too small". I can't see anything but the minimize and close button. (see the attached screenshot)I am running Java v1.4.2_03. I tried the most current release of...
How to see MAC Table in FPR 1010 CLI or GUI ? I ran below commands and does not show any MAC. > show mac-address-table > show mac-learnno mac-learn floodinterface mac learn-------------------------------------------Inside enabledOutside enableddiagno...
Hi Experts, We're running Multi-context Active/standby firewalls on the version 9.8.4.35. We have been asked to delete the VLAN sub-interfaces, it's access-lists and access-groups.Not sure if the sub-interface should be removed first from the specifi...
Hi,I have a few questions regarding eStreamer. Have a setup where FMC virtual is on prem and FTDs are in Azure.Connection is via express route.1- FTD will send all the logs to FMC on-prem over express route and FMC will stream it externally. correct ...
Resolved! Port Security
So I am try to add this configuration switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation restrictTo my Packet Tracer lab however whenever I do...
I have two Cisco ASA firewalls and would like to run these in series for a specific reason, but I would not like to get into the details. My question is how to make it work properly for inbound traffic to reach the 192.168.10.X network and outbound t...
Hello everybody,our customer has a S2S VPN-Tunnel with his Firepower 1120 (7.0.0.1) and a remote Sophos XG.They can communicate through the tunnel but causes error message in the IKEv1 debug outputand the IPSec counters stays 0. The counters of other...
