Hi, lease confirm the below query: In firewall 3 interfaces INSIDE, OUTSIDE, and DMZ. Inside interface connected to our Nexus core switch so please confirm in which interface of firewall we have enabled Netflow?
Forum Posts
Hi community members! Is there a way with Meeraki switching equipment, to dynamically add to the ACL ? e.g. point it to a list I control I want to block certain IPs from a text list. Or at least bulk add if it's not possible for dynamic method. Thank...
So I have some questions here that to me at least are confusing. I really hope someone can clear these questions up. 1)What is the purpose of having thousands of disabled rules. It seems IPS should be all on for rules otherwise what's the point? I me...
All, I am having trouble installing a certificate, self signed or other in my firepower architecture. Currently configured with a vFMC and ASA firepower module. Both devices running version 7, problem carried over from 6.X When I go to request th...
Our regional offices have Firepower FTD devices (without FMC), each with two VTI interfaces to the data center, routing via BGP. We want to use DHCP Relay to point to a remote DHCP server (due to FTD's DHCP lacking needed config options). I don't wan...
Greetings: We are initially configuring a new (my first) Firepower 9300 in Standalone mode (not clustered) for testing with a standard Aviata/JDSU T-Berd 5800 test set and cannot get a successful test. We have the test set configured properly (works...
Within the advanced tab of the access control policy there is option to set network analysys policy and a default IPS policy. Why would I not just create a blanket IPS policy that has everything in it I want blocked like Maleware/Explots etc rather t...
Hello, does anyone knows a supported and official Cisco method to create and mantain dynamic URL/IP list for Microsoft services like Azure and O365 for Cisco products like FTD and legacy ASA?Microsoft already provide urls or feed to consume and this ...
Resolved! Change Cisco FTD Etherchannel Interfaces
Hi Guys.I hope you are doing well. We have a pair of FTDs (2100) in Active/Standby mode. We created a port-channel on them which includes 2 electrical interfaces (Copper). Due to some decisions, we want to change this port-channel to use optical conn...
Hi ...I have cisco firepower 2110 with HA setup. I log into device 1 i get the error, "invalid chassis model. Please contact your administrator" However the secondary pair works that is device 2. Can someone help with the error please?>
Hello, I would like to ask if there is a way for the FMC to send an email when someone logs in and his IP Thanks and regards, Konstantinos
Resolved! FMC Migration from cloud to on-prem
Dear ALL, My FMC 6.4.0 are in cloud provider, the FMC and FTD management port are connecting via public address, I 'm planning to migrate the FMC into on-perm VMware platform, I had use the "backup and restore" to restore the configuration to new FMC...
Hi All,1. How do I export all rules at Intrusion Policy to csv file.I want to know what exact rules are enabled and blocked. 2. Could I export rules at Firepower Recommended Rules Configuration on Intrusion Policy to csv file. @Instrusion Policy, @F...
Hi I'm looking for some guidance on my home/ "to be" small business network. I'm not a expert IT wise but always interested in upgrading my security to a more integrated & automated solution, ideally on prem. Since this is not my area it seems easier...
I need a 3rd party CA for my new Firepower 1120. The scan stated "Please install a server certificate signed by a trusted third-party Certificate Authority" and "Please install a server certificate with recommended maximum validity". I am followi...
