I have an ISR4431 with a NIM-2GE-CU-SFP, and I'm attempting to get (WAN) MACsec working using one of the interfaces on the NIM. Following the worksheet examples in the "MACSEC and MKA configuration guide" everything proceeds OK until I get to configu...
Is Cisco Stealthwatch separate from Cisco AMP? Or, is it just another part of Cisco AMP, like WSA and ESA? Any input is appreciated.
Hi,i need some clarity over licensing on FMC.we have two FMC1(active) and FMC2(standby) in HA. if FMC1 goes down, we need to promote FMC2 as active. then license entitlements moved to FMC2. so we can manage FTDs using FMC2.when FMC1 powered on, it wo...
Hi team, The 2 FMC (v6.6.1) are in HA and managing 4 FTD (6.4.0.10). the critical health notification is showing as CPU usage CPU60 150.01%. how can i fix this issue. as checked in FTD showing Omniquery.pl database consuming 100% CPU. this CPU usage ...
How can I configure Firepower to detect inbound exploits i.e., if somebody is trying to exploit a known vulnerability to the box itself or to a resource exposed to internet. We have Firepower 6.5 and various version of ASA
Hello everyone,I have seen listed notification, that with this box we cannot use the Firepower services. They are already EOL. We have purchased the box before July 30, 2019. please let me know if i can use the firepower services here. I am little co...
Hello, I have an ASA v9.12(4)10 and ASDM 7.12(2)14 I have copied to it the configuration of a production ASA in order to replace it. I see that in cli the INSIDE interface ACL are present but in the ASDM are not shown. Any ideas? Thanks and regar...
I have been tasked with seeing what the highest version is to which we could upgrade our ASAs and so far my strategy has involved checking the release notes and checking for any usage of the deprecated commands. Is there a better way than this? Is th...
Does anyone know of a tool that can do ACL risk analysis? Looking for something that can review the ACLs and return the ACLs that might be high risk ie: allowing src ANY from internet etc.. Something so I dont have to manually check firewalls all the...
Hello, Im looking for a confirmation that both devices in a HA setup based on FPR1010 with ASA image have to have the security license enabled. That it is not sufficient with only one of the units in the HA to have the security license enabled. Secu...
Hi everyone, I'm facing an issue when I try to get a telnet access to the smtp.gmail.com for port 465 & 587 using FQDN. I did everything correct right from making objects, service types for port & access-list for the same. When I use IP Address inste...
Hi there, i have configured port forwarding for L2TP vpn which is configured in Windows server 2019, i have created two access rules in which i have allowed two services of TCP 1701 & UDP 500 destination ports, and i have created two NAT rules in whi...
I have a att fiber connection to my house and the gateway (all in one device) has a built in switch. I connected one of the swichports to the outside interface of my Firepower 1010 expecting everything to work as if I had plugged in a WAN connection...
Hello all, I have a single 5555-X firewall and want to know if it is feasible to convert this appliance into an active/passive deployment while not taking the current device out of action. I am able to get my hands on a second device that matches in...
Hi, I have two firewall. A subnet 172.30.1.0/24 is hosted at inside interface on FW 1. When I am trying to ping from FW 2 to a host 172.30.1.127 (Hosted on FW 1 inside), it is getting ping but when I am trying to ping 172.30.1.126 it is not getting p...
