Setup FMC to block icmp on all my WAN interfaces.Some IP's are blocked and dont reply but some interfaces do.I followed this guide https://www.lammle.com/post/new-ftd-device-not-like-new-asa Any ideas as I need all interfaces blocked from icmpI have ...
Hello, I tried to upgrade FMC from 6.2.3.10 to 6.4.0. The Readiness check completed successfully. I started the update after that. It got stuck at 9%. I saw after in the message center the following:Local InstallInstlling Cisco Firepower Mgmt Center...
Hi Everyone, can i block download files specially exe files from FTD, FMC BR
Hello, Below two pictures are authentication conditions in two different ISE for wireless authentication. The components in the conditions are different. Anyone can explain if the two Rules has the same effect? Thank you
I’m using AnyConnect through my company VPN. It is set up to use a One Time Passcode, which was working fine.When I switched monitors, the One-Time Passcode window was somehow moved off the window. Now, when I go through the VPN connection process, I...
Hello,Is there any method that deletes all zero hits rules in FMC? Script or anything? Thanks a lot
Hi AllI'm using Cisco ASa 5516 and we have module FirePOWER.I'd like to know how do I generate traffic to see in this option.ASA FirePOWER Reporting.I appreciate your help guys.thank youAlex
Hello, I added an ASA 5555-X with FTD appliance to an existing network in transparent mode. The device cannot be configured with FDM because it is in transparent mode which is not supported by FDM. I currently don't have FMC. So the only option I hav...
Hello,I have tested the FPR 2100 HA pair switching time in lab, it took 10 sec.For our production environment, it is too long.I remember that ASA 55xx A/S switching is immediately. Do you have the same time?Maybe there are some specific settings for ...
I am tasked with migrating from a pair of 5585 (ASA, not FP), to a pair of FP4115. I am new to the FP platform, so I am a little lost, as this is very different from the old ASA hardware platform. FInding the proper info on Cisco.com has proven diffi...
Hello. Any ideas anyone?The VTY ACL is severly restrictive on this closed private ip network and set to log every connection. The SSH session initiated from my machine to sw mgmt ip creats a successful connection. However, below sample log is seen: T...
I have a FTD module (SM-36) inside a 9300 chassis being managed by a FMC 4500 Is it possible to create a rule, for example, that says, if port scanning is detected, block the source IP for a period of time? Say 30 minutes? If not, are there API's ...
Greetings all, I wonder if q someone could give me a hand with this.I'm having problems with synchronization of the time of my microsoft NTP and ISE appliance, making and reviewed the internet and tells me that I have to make certain settings on the ...
Hi,Have a very simple query not able to get it..PC1 > -------Inside interface FTDv----outside interface FTDv------> PC 2In this topology i can ping from PC1 to PC2 through the firewall but not the other way around ? I have not static routes configure...
so both seems grouping of interfaces , BVI can provide connectivity by being the gateway , inline set can provide connectivity by connecting to another physical interface . what is the difference and why would i use one or the other?thanks
