Hi, Can anyone point us in the right direction to setup Policy Based Routing on an fpr1140 via the FDM? We cant use the FMC as we dont have a virtual platform compatible (Hyper-V). The FPR's are running software version 6.6.0, according to this artic...
Hi All,I have setup a SSL decryption Known key to protect our web servers.Seems like it's working as events show most SSL connections are "Decrypt (Known Key)" in SSL Status, and show URL details.However, there are still some SSL connections are "Do ...
Hi Community,I want to know if I can route traffic from inside to inside in the cisco ASA 5506.Context : (See picture added)I have 2 LAN in the building and the 2 LAN use the same ASA 5506 for internet and others purposes.I want users of LAN A to jo...
i have observer every 30mints time frame FMC is connecting to "intelligence.sourcefire.com" web site its showing as outbound connection and uploading the data. how do we stop or disable this activity in FMC.
Has anyone been able to complete a vulnerability scan on the Firepower devices (2110) and FMC? I've been reviewing this issue for about a year and want to pick it up again. We fixed our scanning of ESXi hosts, but we're still having issues with Fir...
e are sufferring to setup Network Interface of our newly launched ASAv on Azure environment. By default Managment interface took Public IP Address. But while trying to deselect "Dedicate this interface to management only" its not working. Its again g...
Hello, I've noticed that Cisco AMP is filling C: drive completely. The 'C:\Program Files\Cisco\AMP\Quarantine' uses 192GB of space.I've also noticed that this PC is generating a lot of events for the same file being quarantined over and over again. I...
Cisco ASA l2l vpn tunnel phase1 & phase2 parameters validation through CLII have to collect L2L vpn tunnel parameter details for multiple existing peer IP's but unable to collect actual information. please support.
Hello, Ref. diagram attached. Focusing on the ASA uplinks and downlinks to a pair of C9500 switches which are configured in a StackWise Virtual mode. The two physical ports on the ASA will be bundled into a L3 Port-Channel. From the ASA, each physic...
I got an ASA 5512 from a sale and learning how to configure it, I had to do a password recovery on it to be able to get into it.I got the management port setup and can web into it, it shows Cisco ASDM 7.1(3) on the web page and gives me "install ASDM...
We have a pair of FTD 1140's that we did initial configuration on with IPs 10.1.10.1 and 10.1.10.2. We have to move these to another VLAN for production, so these became 10.4.192.1 and 10.4.192.2. I made the change with the following commands: expert...
Hi we have a PCI compliance scan flagging on this CVE-2018-0101 vulnerability. The issue I have is how to resolve? Can someone assist here as the firewall in question I believe is out of smartnet support. It's pretty ridiculous if you need that suppo...
Hi allAnyone tried to configure "pre-login banner" in fxos 2.9.1.135 on Firepower 4120? It apperars on cli, but seems don't appears on Chassis Manager.thanks inadvance Domevam
For some reason I cannot ping my DMZ IP from outside through static NAT. Packet capture shows the success ping from dmz out but failure on outside in. Packet trace shows that it should be successful. Included is all the relevant running config. # sho...
Hi all, I'm in the process of building a Cisco 2120 FTD appliance in Multi-Context (ASA) mode and I'm strugging with getting remote management access via telnet/ssh. I've configured a bunch of standalone (HA pair) ASAs before and i have previously wo...
