I tested today the establishment of a Route Based IPsec VPN between the ASA and the FTD.Everything works fine however I was surprised that on the ASA I didn't have to add a single ACL.I wonder if traffic destined to the tunnel is treated like traffic...
Forum Posts
Hi AllI am hoping someone can help me.I need to ensure I have logs from my FTD firewalls in my cloud delivered firewall management centre (Cisco SCC)I am told we need the security analytics and logging licence, SAL.When I go to event logging, I can s...
Hello, everyone. A lot of resources say that firewalls can read more than just the traditional L3/L4 headers. They mention that they can read the L7 data and the payload itself. My question is, how exactly is this accomplished if the protocol that's ...
Hi All,I'm currently setting up a pair of 4225 FTDs in active/standby HA using a port-channel interface as the failover/state link (Po48 with member ports Eth1/7 and Eth1/8). The FTDs are running version 7.4.2.1. HA establishes ok and failover works ...
Hello folks,I want to migrate my edge firewall from the Cisco to the fortigate and i want to apply the following:-Allowing the users and denying them in global ACP base on user in user section in ACP.-Applying Malware and intrusion (NGFW features) po...
Hello,We have Firepower 4120 chassis with ASA imageCisco Adaptive Security Appliance Software Version 9.18(4)40 SSP Operating System Version 2.12(1.72)Device Manager Version 7.20(1) Compiled on Tue 27-Aug-24 07:55 GMT by buildersSystem image file is ...
Hello two cisco asa (FTD 2130 in appliance mode) work in failover pair I tried to add a new smtp traffic inspection policy via ssh console policy-map type inspect esmtp quik_no_ehlo_maskdescription do not mask ehlo for quik serversparametersmask-bann...
Hi, is it possible to downgrade FTD 3130 from 7.2.8 to 7.2.5?
Is there a way to configure Hub and Spoke with the spokes being Fortigates and the Hub being FTD's with FMC?
DearI have question.we need to configure ISE radius policy in EWC Controller AP for using users dot1x authentication.Our AP information is like as below. * model: C9115AXI-R * OS : C9800-AP Software (C9800-AP-K9_IOSXE-UNIVERSALK9-M), Version 17.3.7Is...
Hi, May I know the default value of the event database for FMC4600 and FMC2700 equipment?Intrusion event database, connection database, malware event database, etc.As guide of FMC 7, The official document only specifies the upper limit (maximum) valu...
One incident happened where a user in my company complained that phishing emails were being sent from her O365 account. When I analyzed the PCAP, I noticed a connection established using STUN. It seems the intruder may have sent a link, and the user ...
Want to add multiple DHCP relay server configuration on two different outbound vpn interface, while doing so it's not allowing to add the same. Can anyone suggest if want to add one DHCP relay server connects through redundant vpn interface over anot...
Once I set up FMC Integration with Active Directly will the Firepowers managed by the FMC now be accessible using AD credentials? I understand how to integrate AD with FMC, but once you do this will I be able to SSH to the individual Firepowers manag...
Resolved! cisco asa geo blocking.
Is there a way by which we can block all the connections from a country on Cisco ASA, without we manually defining a ACL. Hardware- Cisco ASA5510- Version - 9.0
