HiI have few ASA's in my network for which when I try to do session SFRIam getting the message :"Opening command session with module sfr.Module sfr did not respond to session request." What could be the reasons for getting the above messages ?Has the...
Forum Posts
Hi,I'm trying to configure my first Firepower 1010 replacing Fortigate. Few things I'm stuck at the moment.1. How can I configure dhcp options like 150? I don't see that options anywhere in the FDM gui. 2. Is there anything like software switch fe...
Hello, I need to configure an ASA 5545 as a pass-through filter for devices (two, with one inside, and two outside interfaces each) that are connected directly to the internet. They do not want to use Firepower. I have configured one-to one NATs f...
Good morning I am trying to figure out how to configure vlan ACL to filter mac addresses. And cannot make it work! The goal is to block all mac-addresses inside vlan except those are permitted. I found a great article which declares the same in the o...
Resolved! FMC/FTD question
Hello Does anyone know if Firepower would block packets with a via header added to them.?? Thanks
I have a setup with 4 HA pairs of FTD's in the FMC Global domain all running 6.6.4.x. We intend to deploy many more, so have decided we need to segregate access based on geo-location of the FTD's. So I need to create new subdomains for the new FTD's ...
Currently i am required to enable 2 PPPoE ISP link on the ASA, this specific PPPoE link requires to be tag to vlan 500 for it to be working.Since i am unable to created same VLAN ID on separate subinteface on the ASA.Any way i can configure both ISP ...
We are switching over a section of our environment from McAfee Network Security to Firepower. We have several different policies for different customers. McAfee uses a combination of NSP rules, CVEs, and other ways to identify and categorize intrusti...
Where can you find the TSAgent-1.3.0.exe for Cisco Firepower agent? Can't seem to find in downloads anywhere.
What are different between reboot and restart on SFR module?
In the sho route command below you'll see that the ASA sees three paths to the network 10.1.48.0/23. But it has selected 10.1.0.8 as the preferred path. How does the ASA end up selecting it as the preferred next hop?ASA01/pri/act# sho route 10.1.48.0...
We have two S2S VPN's that go to a remote office. One that goes from Azure to an ASA and one that is from a Sophos Firewall to the same ASA.. From computers in Azure and the site that has the Sophos Firewall, I can RDP to computers at the site with ...
Resolved! Site-to-Site VPN password best practices
Hello, we have 15+ home users with Cisco C881k9 routers that are doing an automatic ikev2 site-to-site VPN connection back to our head-end VPN concentrating Cisco ASA 5525-X firewall. The home users obviously have DHCP public IP addresses. Does anyon...
Hi I have an ASA 5525-X.There is no configuration on the ASA but after executing these commands debug sfr errordebug sfr eventsdebug sfr messagesdebug cplanedebug module-booti have this error below.cp_check_connection: handle -1, conflicts with conne...
Hi, I am trying to integrate Cisco CSM to ISE so that I can resolve the security group tags from CSM. I understand that in order to to be able to retrieve the group tags with a search name/tag in "Security group selector" we need to configure ISE ...
