hi all,I‘m looking for a firewall which should be used to act as layer3 gateway for ~15-20 vlans and segment traffic on layer3/4 between them! I‘m not 100% sure if it would make sense to use also IPS functionality for traffic which is most of the tim...
Forum Posts
HI there I have some questions about firewalls, is cisco firepower capable of doing what is Fortiweb doing ? is the deep packet inspection is the same idea that used in Fortiweb ? or cisco doesn't have WAF, or even if it does can we say it is good a...
Problem: i can not ping lan PC to ASA outside interface(10.10.10.2)i can not ping ASA outside interface(10.10.10.2) to inside interface(192.168.25.254) or LAN PC.ciscoasa# sh running-config: Saved:: Serial Number: JMX1203L0NN: Hardware: ASA5520, 2048...
Hi,I´ve design related question about how a state-of-the-art security solution in a campus network should look like!Assuming that we use a hierachical network where should the Layer3 standard gateway for the clients should be set on? Should I use a L...
Hi All,Can someone tell me what is going on with my customer's ASA 5585? I was attempting to create an object NAT rule for an inside host, but the NAT section does not exist in the Add Network Object window. Also, "Add Object NAT" is not an option ...
Hello,I have a client that has been infected with malware. They use Cisco Umbrella and also have Cisco Firepower (no AMP license).It appears that the malware originated from a third party partner / contractor connection to my clients internal network...
We have a 5508 running the following software: "Cisco Adaptive Security Appliance Software Version 9.9(2)37"This is new to me, as the software configures like FTD - when you ssh in, you have to type "system support diagnostic-cli". I've never done th...
Hi,I have an 2130 FTD, with AnyConnect configured. The problem now is that, I can't protect the vpn ports with access control. I have a rule, but never hit any rule, and never show the hit of that rule Phase: 3Type: ACCESS-LISTSubtype:Result: ALLOWCo...
I am new to FirePower, and trying to work through configuring it on ASA. I know that FirePower does not pass traffic through the backplane, and requires you to use the Management Port. All of the examples I've seen in documentation online involve run...
Resolved! ssh or telnet from cisco FTD Cli
how can I use ssh/telnet to connect another device from cisco ftd cli .is this command available on FTD CLI
I inherited a Firepower 4115 pair. I can't find the local admin login for the Chassis manager. I do have the local admin login for Firepower Management Center. I also have console access with a local admin. I have an external user account that login ...
Hello all, I'm having some trouble with an ASA not port forwarding correctly. I've no doubt I'm missing something, but can't see it. Set up is simple:-vIOS 3 is the "inside" - 10.0.0.10vIOS 2 is the "outside" - 20.0.0.10ASAv is 10.0.0.1 (inside) and...
Hi Team,I wanted to make you aware that we will have a series of monthly 30-45 minute technical webinars regarding the migration to Snort 3. This is highly relevant for ALL FirePower customers and Snort users, particularly with the pending release of...
After an update to the new Syslog server, I am not able to see ASA Syslog on my firewall.DR Firewall extranet interface sends Syslog to log server, then verify traffic from production firewall. DR firewall interface is linked to Production FW one of ...
GreetingsI just learned from our Cisco partner ASA5508-Xs and ASA5516-Xs are being EOLed which in my particular case causes alot of teeth grinding since I replaced our fleet just two years ago and in these times will have a tough going in the next bu...
