Wondering if anyone has seen where a policy-map "drop log" doesn't properly log dropped packets.I am wanting to drop and log all packets on one port of a router and allow all on another.I've got two networks in a test environment on a 4331: 192.168.1...
Forum Posts
Hi, With a router you configure the BGP MED and local preference using route-map. Then apply that route map to the neighbor configuration. How to accomplish this same goal with FMC/FTD for MED? I think I see how to set the local preference:object -...
Hi All I'm using FTD on ASA 5506x v6.2.3.16-59 (managed by Firepower Device Management) with latest updates.I have rule with app filter HTTPS and url category which should be blocked Dating (just for testing)as you can expect this rule is not working...
We are about to change our ISP and the public IP address of our FMC will change, I have all my sensors registered over internet. Should I have to re-register all the sensors or is there a way to edit some config and make it work?
Hello, I have upgraded to 6.6.1. I see an issue with URL Reputation. Apart the fact that FMC is using now Talos and the reputation of many sites (mostly Hellenic) have changed, i have another issue. When I look the URL in Analysis->Advanced-> Lookup...
I have applied the following filtering on ASA public interface so that nobody can ping it from internet, but everything from firewall / lan should be pingable. This is working fine but I realized we can't traceroute anymore. How can I enable tracerou...
Hi we have 2 FTD 2110 on 6.4 Version and in actif-passif high availability mode. And yet we see some remote access anyconnect users connected on the standby unit, is it normal ? we are going to shut the standby unit, is there any production cut risk ...
I am running into this issue on FMC 6.5. It says contact tac. What exactly is the workaround for this issue. Tomcat process is down and so is vmbackendserver.
Resolved! How to add ASA5506-X to FMC?
Hi, I'm trying to create a lab with 2x 5506-X FWs and add them to the FMC. However initial configuration after FW reset doesn't allow me to choose 'Managed locally?' and set in to 'NO'. Therefore i can't use command 'Configure manager add xxx' - this...
Hi everyone,Here's my question, given the next NAT rule:nat (any,DMZ) source static any any destination static nat_12.164.193.111 vip_172.24.56.77 unidirectional description abcd ,Does the Cisco ASA uses the outgoing interface as a matching criteria ...
Resolved! Restore a backup to a temporary FMC
Does anyone know if the FMC Management address changed after restoring from a backup or if there's a way to prevent this from happen?I have a customer that want to test to restore a production FMC config before upgrading . They have a LAB FMC on an ...
I got a Cisco 1841 with IOS version 1841-advsecurityk9-mz.124-25f. Trying to learn more for ccnp security. I also got the AIM IPS hardware module for this unit Where do I find out what the default signatures do?Where can I download new signatures as ...
Resolved! Cisco IOS local password requirements
Hi there, Can someone tell me what the requirements are for Cisco IOS local passwords? (permitted characters, maximum password length etc)? I am in the process of developing an offline tool to create Type 9 hashes from a plain text password provided ...
[urgent problem.]Hi!I have fresh started Firepower. I'm connected to Cisco Smart License service.I'm trying to add an ip into a network object and don't need to deploy that can still block IP.We gonna add an block ip that use API,that can skip to dep...
Let me first explain what I am looking for around this post Title. Say I have a production datacenter using a pair of FTD (managed by local FMC) for Internet Edge security. Now I need to setup a second datacenter for failover/backup (not 100% DR) of ...
