Hello, I am having an issue with ASDM loading the configuration of my ASA 5585-X I get the following messages/errors I have included some output from some commands that might be helpful. I have searched forums and everything else but I cannot find...
I configured my IPS policy by filtering by maleware and selecting "Drop and Block" for all snort rules. I have this event coming up (See atttached) matching one of the rules. Its the internal DNS server it seems being flagged as the attacker and even...
Can I change the number of access control policy rules displayed per page in FMC? It seems to default to displaying only 50 rules at a time, which is a bit low.
I imported the certificate to java trusted certificates, it shows the some error.is it due to certificate is Self-signed ?.And is there any way to overcome this problem other than overriding SSL certificate verification.Is there any way to add SAN to...
We are in the process of deploying an FTD on a 4110. We have access to the web interface of the firewall chassis manager and the fxos via ssh. I uploaded FTD-6.6.4 onto the appliance, and I'm trying to create a logical FTD device. There is the one ma...
Hi all!After upgrading from 6.4.0 to 7.0.0 I am stuck with some pending deployment changes. When I try to deploy them I get the following error:ERROR: Failed to open "udp/localized/25/4500"ERROR: Error opening IKE port 4500 on Interface outsideConfig...
Dear Community, I would like to implement Host Discovery as part of the Network Discovery Policy. However, I had a few questions: 1) The Config guide states: "Rules in your network discovery policy are evaluated sequentially. You can create rules wit...
Hello everyone, I have found the CVE-2018-0101 vulnerability recently.Our ASA(5515) had enable the webvpn. Here is the show version output:ASA5515# sho version | in VersionCisco Adaptive Security Appliance Software Version 9.2(2)4Device Manager Ve...
Does the access control policy based on application filter (allow or block access of SFTP ) needs URL filtering licenses?
Hi all I need to upgrade the ROMMON on two ASAs that are running site to site VPNs. They are currently running versions 1.1.14 and 1.1.8 and need to go up to 1.1.15. The upgrade process involves a reboot so1. will the VPNs automatically come back up ...
We have a pair of FTD 4110's that have been sitting in a closet for 3 years, but we're dusting them off and trying to upgrade the software. I transferred the software and see it as an 'available update,' but the status is 'not-installed' and I don't ...
Good afternoon We have an alert in our FMC that I am unable to clear: This was caused by adding then removing an interface on an FTDv VM in Azure, It looks like this bug Bug Search (cisco.com) but apparently this was fixed in a previous version, We...
Dear colleagues, on Cisco FTD it is a bit tricky to implement NAT-rules, please help me to understand how to do this. I attached the picture. Here we have two sites, connected via ISP. On each site we have Cisco FTD and server. Servers should initiat...
Migrating a TMG configuration to the FDM and wondering if any functionality exists in the FDM for inbound inspection of SSL traffic vs requests from end users. As an example, there is a single internal web server w/ multiple nics, say 10.10.10.25 an...
Hi,I have to configure Anyconnect with Azure AD.I had followed this tutorial for saml auth:https://www.youtube.com/watch?v=bSGjeJotO2sBut this is just for ASA and the copy/paste text you prepare for the installation will not be accepted by Firepower....
