Hi all, bit of a bizarre one, we have an ASA 5555-X running 9.12, it's been up 173 days. Doing some troubleshooting via the ASDM and the logs we are getting aren't complete, ie we don't see everything or we intermittently see logs. And if you take ...
Forum Posts
Hello all,there is not too much information about Protected Access Credential (PAC) file deployment and background for Cisco ASA firewalls except this and another official documentation.there are stated following restrictions about importing PAC cred...
We currently have a working tunnel from one of our ASA's to AWS. As we can only have single subnets set in the tunnel due to AWS limitations, our NAT statements have quite wide ranging subnets to catch all the possible combinations.We have one serer ...
Hello,I need to modify the Carrier Delay parameter on my Firepower 2130 (FTD).Any documentation or advice with which you can guide me?
While doing an SSL qualys scan on an ASA, no support for secure renegotiation and forward secrecy getting flagged. I am striking out on finding info on this. Anyone know how to fix this? I currently have tlsv1.2 only enabled with only stronger ci...
Hello,I have a question regarding HA setup within a LAN, in a scenario where there are 2 main buildings. I'm curious as to how this would be best achieved through either configuration or from a design standpoint. I have attached an image showing the ...
Hi All I would like to know if the firepower 4100 setup in Active-Passive, so if the uplink switch in VSS, combine 2x 40G uplink to the Firepower pair. QuesionFirepower Active-Passive setup, what would the real time interface bandwidth would be , is ...
I am trying to forward port 443 to a local on prem proxy so I can host webservers. I also need remote access vpn enabled which as far as I can tell automatically enables the 443 service on the outside interface. This is happening even when I disable ...
Folks, I am trying to initiate a ping from my FMC Cli but I do not see Ping command available in CLISH mode.. All I see >ConfigureExitShowSystem When type system. Sytem> It will give other options but No Ping, configureexitexpertgenerate-troubles...
Hi everybody! I'm trying to wrap my head around a network design shown in the attachment. Essentially, it will be hub and spoke utilizing the FP2100 platform funning FTD. I haven't used FTD before and I'm having trouble getting the 'Gray Site to Site...
Resolved! PBR on FPR1140 6.6.0
Hi, Can anyone point us in the right direction to setup Policy Based Routing on an fpr1140 via the FDM? We cant use the FMC as we dont have a virtual platform compatible (Hyper-V). The FPR's are running software version 6.6.0, according to this artic...
Resolved! FirePower SSL decryption Known Key
Hi All,I have setup a SSL decryption Known key to protect our web servers.Seems like it's working as events show most SSL connections are "Decrypt (Known Key)" in SSL Status, and show URL details.However, there are still some SSL connections are "Do ...
Hi Community,I want to know if I can route traffic from inside to inside in the cisco ASA 5506.Context : (See picture added)I have 2 LAN in the building and the 2 LAN use the same ASA 5506 for internet and others purposes.I want users of LAN A to jo...
i have observer every 30mints time frame FMC is connecting to "intelligence.sourcefire.com" web site its showing as outbound connection and uploading the data. how do we stop or disable this activity in FMC.
Has anyone been able to complete a vulnerability scan on the Firepower devices (2110) and FMC? I've been reviewing this issue for about a year and want to pick it up again. We fixed our scanning of ESXi hosts, but we're still having issues with Fir...
