Hi All, I would like to disable enable password. Currently, we are using version 9.9.Trying this command but not work:no enable passwordenable password ( without key in any password) Which command needs to run. Please help user-identity default-domai...
I want to extend a vlan of 1 subnet between two sites like an extension using VXLAN between two ASA's as I know that ASAs support VXLAN, is there is a way to do this or impossible using ASA, it seems straight forward on other firewalls like fortigate...
We have found TSLv1 weak encryption algorithm in FTD in audit and they suggest mitigate it with latest TSLv. But in present we can see only TSLv1.2 is available with in FMC, both FMC and FTD version 6.4.0.7.Is it close once we upgrade it with TSLv1.2...
Hello, We have a pair of ASA5585 configured in HA and I am trying to understand if the ASA can do ECMP on a port that's configured with sub-interfaces. The Cisco document below describes that ECMP can only be done on the same port/interface. "Multip...
If I want to send specific syslog messages via an event class, will specifying "error" as an example send only error syslogs?
Hi Team I'm using FTD on ASA 5506x v6.2.3.16-59 (managed by Firepower Device Management) with updates:Two days ago I've reported to BrighCloud support that http://www.szachypolskie.pl/ should be categorize (it was under Uncatogorized category). I've ...
Hello for everyboy. Have some issue with adding this device in zabbix monitoring.According config guide for FMC for firepower 1000 series i need to create snmp settings161 port for zabbixcommunitysystem admin name - admin (admin name for FMC or Fp114...
We are using SolarWinds-Orion as our centralized monitoring tool and we are also monitor the Cisco Firepower Management Center(FMC) & Cisco Firepower Threat Defense (FTD) as part of it. While running the custom report for 'Device Inventory' on SolarW...
Hello, I have an ethernet cable coming from an outside source that is supposed to relay information to a PXI chassis I have on my system. I would like to protect the PXI chassis from this outside source and don't want to plug it in directly to the mo...
Wondering if anyone has seen where a policy-map "drop log" doesn't properly log dropped packets.I am wanting to drop and log all packets on one port of a router and allow all on another.I've got two networks in a test environment on a 4331: 192.168.1...
Hi, With a router you configure the BGP MED and local preference using route-map. Then apply that route map to the neighbor configuration. How to accomplish this same goal with FMC/FTD for MED? I think I see how to set the local preference:object -...
Hi All I'm using FTD on ASA 5506x v6.2.3.16-59 (managed by Firepower Device Management) with latest updates.I have rule with app filter HTTPS and url category which should be blocked Dating (just for testing)as you can expect this rule is not working...
We are about to change our ISP and the public IP address of our FMC will change, I have all my sensors registered over internet. Should I have to re-register all the sensors or is there a way to edit some config and make it work?
Hello, I have upgraded to 6.6.1. I see an issue with URL Reputation. Apart the fact that FMC is using now Talos and the reputation of many sites (mostly Hellenic) have changed, i have another issue. When I look the URL in Analysis->Advanced-> Lookup...
I have applied the following filtering on ASA public interface so that nobody can ping it from internet, but everything from firewall / lan should be pingable. This is working fine but I realized we can't traceroute anymore. How can I enable tracerou...
