hi out there I just got a bit surpriesed when I was chasing a "hit" in a ACL on a firepower 4110 running FTD OS 6.6.1 - we have ACL whcih is pretty high - near the top - of the policy - which is pretty open but based on AD-group membership. When I ra...
Hi all,We have an FMC appliance deployed in VMWare for managing FTD clusters. However, the system intermittently displays the following warning "High Disk Space Utilization". In general, FMC GUI can take up to 30 seconds to load when you log in and r...
Does anyone knows when exactly did FTD changed remote syslog messages format? Up to 6.2.3, the syslog had the following pattern (as received by a remote syslog aggregator): Spoiler (Highlight to read)# Dec 29 20:56:43 ftd ftd SFIMS: Protocol: TCP, Sr...
Hi everyone I'm having this rare issue in which i have an inbound ACL with a "permit any any" rule at the bottom that is logging its matches so i can declare the application traffic on top of it and delete this unsecure rule . The thing is i have con...
We have an ASA-5508 that was running FTD, but for a location we're placing this at, we decided to migrate this to ASA firmware. I used the following commands after deleting the contents of the flash: rommon 0 > address 10.86.118.4rommon 1 > netmask 2...
Hi everyone, - I'm using the default ASA firewall config (inside is 192.168.0.0/24) and setup the FirePOWER module to use 192.168.0.2/24. I can ping the FirePOWER module from my PC and from the ASA's CLI and can connect via SSH. - I've ran "show modu...
Hello,I have got a FRP 2130 FTD v6.3.0 (mode evaluation, not yet insert the token) and I am doing testings on lab.1. Can I create Redundant interface ? (used on ASA 55xx)2. Can I create Etherchannel? How? I didn't find them out on FDM. Only possible ...
Good day How to i see the number of Anyconncet users my FTD license permits? In CLI and FMC Thank you
Hola a todos! Soy nueva en el foro y aprovecho para presentarles un caso que me ha pasado la semana pasada:En mi trabajo la semana pasada nos llegó un correo acerca de CSI (Computers and Structures, Inc.) diciéndonos que habían detectado que dentro d...
I have a Cisco firewall with Security License bundle,Part number: ASA5506-SEC-BUN-K9I need to set up 30 remote access users using the Anyconnect VPN client.Does ASA5506-SEC-BUN-K9 include the Anyconnect VPN client license?If not, which license pack ...
Hello community, I am trying to use the Captive Portal with a FMC/FTD deployment that is at version 6.6.1. I got the Realm configured and downloaded the users, using the Digicert root CA as a trusted CA since the LDAP certificate is a wildcard certif...
Hello, I'm upgrading an FTD from 6.2.3 to 6.6.1 and keep getting the following errors in the logs: **********************************************************[210113 13:34:41:525] Starting script: 000_start/101_run_pruning.plentering scriptDraining di...
We want to enable our GEO-IP and use the whitelist/blacklist from connection events. We have a White/Blacklist of GEO-IP objects, we'd like these in the GLOBAL ACP so they are applied everywhere.No matter where I place the GEO-IP block rule, if it is...
HiI Send estreamer from FMC 6.7 to Splunk 8.1 every things work fine except that I cant send original client ip address and HTTP response code.extended option is enable in estreamer.conf:"archiveTimestamps": true,"eventExtraData": true,"extended": ...
We are using ASA and Firepower for internet filtering in Data Center. Our requirement is to control internet access on 'Need basis' only -- Allow what is required and block everything else, this includes the servers. So far so good. We are trying to ...
