Hi, do not port forward on a private address.private address 10.100.100.6:80 Interface OUTSIDEinterface GigabitEthernet1/1description Redundant1 backup upplinkno nameifno security-levelno ip address!interface GigabitEthernet1/2description Redundant1 ...
Platform: single Firepower 4110 firewallCurrent FXOS Version: 2.7(1.106)Current FMC Version: 6.5.0.3-3Current FTD Version: 6.5.0.3-3 We're trying to upgrade FTD from 6.5.0.3-3 to 6.5.0.4-57. After attempting to install or push the 6.5.0.4-57 image we...
Dear Community,I had a question about interface monitoring for failover on the devices. I have a mix of port channels with sub-interfaces as well as individual interfaces. In terms of the port channels, should I be monitoring only the port channel or...
Hello im trying to establish an ipsec tunnel between 2 ASAs 8.4 with no luck, but i dont seem to find out what is missing Can someone check if my configuration ts ok? i SITE AObject-group network COMPANY-ANGNetwork-object 192.168.100.0 255.255.255.0N...
Hi all, I've been tasked with building active/standby HA pairs of FTDs.Eventually I'll have to complete 1120, 2130 and 2140s, but I'm currently working on the first pair of 1120s.This is our first FTD and my first for configuring HA pair, and I'm fol...
Hi, I did an inital setup of FTD in VMware but I can't seem to configure the IP and/or enable the interfaces in CLI. How do I enable and configure the IP through FTD CLI (I access this through VMware webconsole and not via SSH).
Hi, I've tryed to add a 5506-X device to FMC and to do this you need the IP and "Registration Key". I think the "Registration Key" is added when you do the inital setup but I never did that part. Is there any way change the Registration Key (or find ...
This question arises as a result of CVE-2021-1675, the MS print spooler vulnerability. Is it possible to block access to a specific RPC service? Can the dcerpc application inspection engine dig that deep?
I have run vulnerability SCAN for few cisco devices & found this .. Let us know if you can help here. THREAT:Cisco IOS is a family of software used on most Cisco Systems routers and current Cisco network switches.There are several variants/code that ...
Hello,i am actually migrating my SSL-VPNs from a Cisco ASA 5508-X to a Cisco vASA.My issue: VPN Connections are established but not using the configured GPOs > Uses DfltGrpPolicy.Group Policies should be matched via the returned "Class-Attribute" lik...
i have an issue but im not sure if its an issue or not ? which is all interfaces security level are 0 and according to my below configuration i have inside and outside and both zero sec level as below :interface GigabitEthernet1/1nameif outsidects ma...
I have an DMZ network which has 10 DMZ interfaces from DMZ1 to DMZ 10.I want to packet capture for an ip address in DMZ network.[10.10.x.x]I want to do a packet capture but am not sure through which interface my traffic is flowing.is there any way to...
Hi all, when logging in from the ASDM to the Cisco ASA 5506-X I see the following error on the Java console, and it remains forever loading (after entering the username and password): Using JRE version 1.8.0_231 Java HotSpot(TM) Client VMUser home di...
guys..what is the recommended syslog configuration if i want to send all logs to azure sentinel?i mean do i need to include the uplinks in the command? eg below:-logging facility sysloglogging source-interface "uplink-ports"logging host "ip add of sy...
In a FPR Clustered Deployment Scenario due to the performance issues you're not supposed to do the NAT over the firewall clusterSources:BRKSEC-3032 and CCNP Security SNCF 300-710 if we decide to do the recommendation here, and do the NAT on an ASR-9...
