Hello ,In a scenario that ASA has it's vpn-filter-list and after the posturing check a DACL is also assigned.Both lists works or the DACL overrides asa-vpn-filter ? Spyros
Hi all,I am facing issue: Firewall Cisco Firepower block traffic between 2 zone but I not show block traffic on event.I decriable about my system:1. I have Firewall Cisco Firepower running HA, and have 2 zone: Sec-zone and User-zone.2. I take capture...
Hello everyone, please help with an understanding of NGFW processes.When scanning an external network protected by firepower ftd 2130, the scanner shows open ports on hosts that are explicitly closed in FMC, and when trying to connect to an allegedly...
hi,i disabled anyconnect/webvpn on an ASA FW since it's not being used and to help reduce the vulnerability on the FW.i got a warning prompt below and was wondering if this is normal? my google search is failing me and i want to know what does it mea...
Hi there. I have two ASA5506Xs which have started rebooting daily. It appears to have started once I renewed their SSL certificates. However, everything SSL wise appears to be working fine. The two devices are connected by a network tunnel. Thanks
When I remotely ping from a remote network 192.168.210.x to a server (192.168.17.x) it fails.1. I have already enabled "same-security-traffic permit inter-interface"2. I have already a policy map to do TCP state bypass the ASA logs show:4Jun 26 20201...
Hi all, i have deployed an FMCv onto ESXi today and i'm having an issue with registering the smart licensing When i enter the product registration token into the FMC and press register it does not complete and just sits there. I know there is a rout...
Hello community, I would like to know what are the OIDs that are usually used to monitor a pair of FP2130 appliances connected in Cluster, for example: fan, cpu, memory, links and I do not know what other you can give me.
Hello everybody,I have the case where a backup was interrupted by a Firepower-Modulein a ASA by IPS. It recogniced a "eicar test string download attempt"Event Information
Event POLICY-OTHER eicar test string download attempt (1:37732:4)
Timestamp 202...
We need to access FTD's outside interface from inside for monitoring and troubleshooting. I've set up dynamic NAT and nated IP differs from outside IP but in the same network. I can access external IPs except FTD's. Packet tracer output Phase: 2
Type...
Below is the show version outputs. It said AnyConnect Premium Peers : 150Which is the device limit of users , and I know that the ASA will use the device limit despite the license installed. Licensed features for this platform:
Maximum Physical Inte...
Hi Team, I have 3 domains configured in my FMC, i.e. Global, DomainA, DomainB & DomainC.By default, the landing page on login is the dashboard (under Global). I can see that we can change this to any page (within Global) via "user preference". Is th...
Hello there, We are in the process of building a brand new firewall cluster using two ASA 5508-X with Firepower Services. However, either I'm completely screwing something up or hit a bug. Scenario: 2x ASA 5508-XSoftwaremanagemt: FMC version 6.5Softw...
Hi Everyone, I've been going through all the topics on this issue and have not been able to find a single answer that works for me. The firewall was factory reset, and maintained part of it's settings. I made sure it has the IP of 192.168.1.1 for V...
