I can VPN to local LAN through PIX 510 Firewall. The inside gateway address on PDC is 000.000.20.12 which is the inside address of PIX. On the LAN there is a BDC com server that is using 000.000.20.1 gateway through a Cisco 3600 Router to the company...
Forum Posts
Hi, everybody. Faced with such a problem. (which probably occurred after the DC update) FMC1500Software Version 6.3.0.4 (build 44)OS Cisco Fire Linux OS 6.3.0 (build21) No user activity in Analysis -> User -> User Activity. I am using Cisco Firepowe...
HI All, How do I keep current intrusion policy configuration when I update snort rules?Could someone help me? Best Regards,Nicholas
I have an ASA running sourcefire. Recently I noticed that the sourcefire module is showing as unresponsive and not functioning properly. After logging into the system I noticed that / However if I run the following command "sudo du -shc /var/*" I a...
Resolved! Suspected false positives in FMC
This morning when I logged into our FMC I had several new IOC's on my context explorer, all of which were related to CnC connection attempts. After getting into the analysis and using the talos lookup tool on the IP address associated with these even...
Hello guys,i have a operational ipsec tunnel between Cisco ASA 5505 and other firewall across my network. Traffic goes through in both direction. Now, i would like to source NAT ipsec incoming traffic (from ASA perspective) with its inside interface ...
Hi Experts!Please help me out on the following requirement. Thanks in advance! BACKGROUNDWe have some third party contractors that remote-VPN via Anyconnect on our 5525-x firewall. They are NOT part of our Active Directory. We are deploying ISE in ou...
All, I am having trouble installing a certificate, self signed or other in my firepower architecture. Currently configured with a vFMC and ASA firepower module. Both devices running version 7, problem carried over from 6.X When I go to request th...
Hello, does anyone knows a supported and official Cisco method to create and mantain dynamic URL/IP list for Microsoft services like Azure and O365 for Cisco products like FTD and legacy ASA?Microsoft already provide urls or feed to consume and this ...
Resolved! Change Cisco FTD Etherchannel Interfaces
Hi Guys.I hope you are doing well. We have a pair of FTDs (2100) in Active/Standby mode. We created a port-channel on them which includes 2 electrical interfaces (Copper). Due to some decisions, we want to change this port-channel to use optical conn...
Hello, I would like to ask if there is a way for the FMC to send an email when someone logs in and his IP Thanks and regards, Konstantinos
Resolved! FMC Migration from cloud to on-prem
Dear ALL, My FMC 6.4.0 are in cloud provider, the FMC and FTD management port are connecting via public address, I 'm planning to migrate the FMC into on-perm VMware platform, I had use the "backup and restore" to restore the configuration to new FMC...
Hi All,1. How do I export all rules at Intrusion Policy to csv file.I want to know what exact rules are enabled and blocked. 2. Could I export rules at Firepower Recommended Rules Configuration on Intrusion Policy to csv file. @Instrusion Policy, @F...
Hi I'm looking for some guidance on my home/ "to be" small business network. I'm not a expert IT wise but always interested in upgrading my security to a more integrated & automated solution, ideally on prem. Since this is not my area it seems easier...
I need a 3rd party CA for my new Firepower 1120. The scan stated "Please install a server certificate signed by a trusted third-party Certificate Authority" and "Please install a server certificate with recommended maximum validity". I am followi...
