I am trying to post a rule using {'action': 'BLOCK'} but this is failing. If I change the action to {'action': 'ALLOW'} the POST is successful. I have configured a rule with the block action in GUI and then checked the output in api-explorer and th...
Forum Posts
Hello Cisco Community I'm running into an upgrade issue - I'm looking to see if any anyone has come across such an error when upgrading "FTD (41XX)" from 6.2.3 >>>> 6.6.x - see below Upgrade_status.log-----------------------PERCENT:[ 3%] MESSAGE:F...
Can some please help me understand following ACL. object-group service SERVICE_Object service-object tcp eq 30175 service-object udp eq 30175 access-list OUTSIDE extended permit object-group SERVICE_Object 1.1.1.1 2.2.2.2 is it 1: any traffic from ...
When manually submitting files for analysis in Threat Grid you can opt to have them Private or Public. Are those submitted by the automatically from the FTD private or public or is this a setting one can choose? The worry is that company sensitive i...
Hi team, I have configured Cisco ISE as TACAC+ for firepower chassis. i am able to authenticate chassis with TACACS+ credentials.But when i tried to login security engine which is not authenticating with TACACS+ but i can login using chassis local us...
Hi Cisco Guru, I'm currently using FPR1K running FDM code with outside interface is DHCP. However, since our ISP subscription is dynamic IP and they may sometimes force to renew a new IP and when this occur, my FPR will keep the old IP even disable a...
hello Team, In FTD remote VPN is working perfectly.. and users are getting IP address as per the VPN profile.. the problem is that.. how should the same would work with static IP address.. As per the India DOT guidelines, the customer need to have st...
Hello, I have a simple question to understand the behavior from the ASA side. Once the connection is marked as half-closed , during that ( 30 seconds ) if the ASA will receive a syn packet related to the original connection what will happen exactly ?...
Resolved! FTD 2120 chassis and asa management IP
Hello, I would like to ask about the management addresses of Firepower 2120It has one IP for the chassis management and one IP for the ASA management. By default they are in the same subnet. Is it necessary to be in the same subnet? How do I change...
Resolved! ASDM Firepower tabs missing Java 1.8u271
Hi all, I'm sorry for opening this discussion even if there are many other similar on the community, but none of those solutions worked for me. I'm managing an ASA5516-X with firepower that was working fine with ASDM since some weeks ago.The issue th...
Greeting everyone. I have been struggling with getting an IOS image to ASA. I really need help to identify what I don't understand to remove forward. So far, I'm using a Solarwinds tftp server with the IOS in the C:\TFTP-ROOT file with Server Binding...
Hi all, This is a general query regarding whether there is a feature within FirePower FMC that can send notifications to users when a policy is being (or simply when someone appliance logged in) edited Story:Myself and my team sometimes need to excha...
Hey everyone, I was going through the end-of-life/sale notices of the Cisco ASA at the link below and noticed a mention of "next version of ASA". This caught me by a (happy) surprise because I was recently told that Cisco is doing away with ASA pla...
Resolved! Cisco FTD 1150
Hello All. there is any limitation of using FTD 1150 instead of 2110. another one, is 1150 support failover ethernet interface or just support ether channel? I'm going to order one of these product and i see there is no big different between 1150 an...
Hello. My old 5508-X was a V1 and it crashed and was not qualified for replacement (I have no contract) so I went out and got a new/er one (V5) and everything turns on beautifully and loads my SSD (though it didn't load the config) and so I restored ...
