We have found TSLv1 weak encryption algorithm in FTD in audit and they suggest mitigate it with latest TSLv. But in present we can see only TSLv1.2 is available with in FMC, both FMC and FTD version 6.4.0.7.Is it close once we upgrade it with TSLv1.2...
Forum Posts
Hello, We have a pair of ASA5585 configured in HA and I am trying to understand if the ASA can do ECMP on a port that's configured with sub-interfaces. The Cisco document below describes that ECMP can only be done on the same port/interface. "Multip...
If I want to send specific syslog messages via an event class, will specifying "error" as an example send only error syslogs?
Hi Team I'm using FTD on ASA 5506x v6.2.3.16-59 (managed by Firepower Device Management) with updates:Two days ago I've reported to BrighCloud support that http://www.szachypolskie.pl/ should be categorize (it was under Uncatogorized category). I've ...
Hello for everyboy. Have some issue with adding this device in zabbix monitoring.According config guide for FMC for firepower 1000 series i need to create snmp settings161 port for zabbixcommunitysystem admin name - admin (admin name for FMC or Fp114...
We are using SolarWinds-Orion as our centralized monitoring tool and we are also monitor the Cisco Firepower Management Center(FMC) & Cisco Firepower Threat Defense (FTD) as part of it. While running the custom report for 'Device Inventory' on SolarW...
Hello, I have an ethernet cable coming from an outside source that is supposed to relay information to a PXI chassis I have on my system. I would like to protect the PXI chassis from this outside source and don't want to plug it in directly to the mo...
Wondering if anyone has seen where a policy-map "drop log" doesn't properly log dropped packets.I am wanting to drop and log all packets on one port of a router and allow all on another.I've got two networks in a test environment on a 4331: 192.168.1...
Hi All I'm using FTD on ASA 5506x v6.2.3.16-59 (managed by Firepower Device Management) with latest updates.I have rule with app filter HTTPS and url category which should be blocked Dating (just for testing)as you can expect this rule is not working...
We are about to change our ISP and the public IP address of our FMC will change, I have all my sensors registered over internet. Should I have to re-register all the sensors or is there a way to edit some config and make it work?
Hello, I have upgraded to 6.6.1. I see an issue with URL Reputation. Apart the fact that FMC is using now Talos and the reputation of many sites (mostly Hellenic) have changed, i have another issue. When I look the URL in Analysis->Advanced-> Lookup...
I have applied the following filtering on ASA public interface so that nobody can ping it from internet, but everything from firewall / lan should be pingable. This is working fine but I realized we can't traceroute anymore. How can I enable tracerou...
Hi we have 2 FTD 2110 on 6.4 Version and in actif-passif high availability mode. And yet we see some remote access anyconnect users connected on the standby unit, is it normal ? we are going to shut the standby unit, is there any production cut risk ...
Resolved! How to add ASA5506-X to FMC?
Hi, I'm trying to create a lab with 2x 5506-X FWs and add them to the FMC. However initial configuration after FW reset doesn't allow me to choose 'Managed locally?' and set in to 'NO'. Therefore i can't use command 'Configure manager add xxx' - this...
Hi everyone,Here's my question, given the next NAT rule:nat (any,DMZ) source static any any destination static nat_12.164.193.111 vip_172.24.56.77 unidirectional description abcd ,Does the Cisco ASA uses the outgoing interface as a matching criteria ...
