Community, I had a question regarding the NAT Divert feature. I am noticing some interesting behavior on my ASA 5545-X running 9.6(4)(42). I am noticing that on the Section 1 NAT rules that are configured as Unidirectional, it seems that the ASA is u...
Forum Posts
I have access to CLS SSNGFW course lab and was researching the FMC/FTD back up functions. But I read this from the docs and it confused me. Requirements for Backup and RestoreBackup and restore has the following requirements.Model Requirements: Back...
I've been reviewing documentation for the FMC API and have not come across a script to update an existing object. Is there a way to perform this function as of FMC version 6.6.1? I have successfully created objects, but I require further information ...
Resolved! ASA 5506-X IOS check
I just wanted to get a sanity check on my current IOS versions just to be sure there isnt a newer version I can go to without any issues. In looking at the documentation, I believe this to be the highest version of FirePower and ASA/ASDM I can go t...
Resolved! FMC dedicated link for Sync
Hi team, I have 2 FMC 2600 hardware appliances. i want to setup dedicated link for both FMC synchronization. so i decided to use Fiber port. what would be the recommended SFP module speed (1G or 10G). Thanks in advance.
The Scenario:On the ASA in CLI I can ping 8.8.8.8 and google.com successfully.On a host(PC) I can ping 8.8.8.8 successfully but cannot ping google.com (ping request could not find host google.com)I am fairly new at all this but understand most of the...
Hi, I am trying to create an ACL for a host in DMZ which can receive emails from the outside, and send emails to one of our exchange servers internally. Also, to have HTTP/HTTPS access to the host from one of our jump boxes. This is what I used:ip ac...
Hi, we are using local users on our ASA for remote VPN access and want to give them no further access on the ASA. Therefore we set their Access Restrictions to "No ASDM/CLI" as per our policy. Unfortunately one of our admins recently forgot to change...
FMC 6.6.1When adding IP's to the whitelist the FMC does not show anything in connection events. these just disappear.Trying to get this SSH_EVENT_RESPOVERFLOW fixed as I have legitimate traffic that is getting blocked.Pre filtered it using fastpath. ...
I have an FMC with an FTD v6.6.1When I try to setup a packet capture w/trace on the FMC for this FTD I get the following error message when I try to save (apply) the capture: "Unable to execute the command properly. Please see logs for more deta...
Hello everybody, our customer's FMCv 6.2.3.16 shows the process SFDataCorrelato on 100% CPU load and nobody is able to login on GUI.admin@firepower:~$ top top - 07:37:23 up 231 days, 21:40, 1 user, load average: 1.45, 1.41, 1.55 Tasks: 164 total, 1 r...
I have a client that is deploying a large number of ASA's w/ FirePower. Most of them when they joined FireSight are working fine, but there are a handful that are having issues with time synchronization. If I do a show ntp on the module that is hav...
Hi All,After configuring both the router and firewall for LAN internet access the LAN computers was able to ping 8.8.8.8, 4.2.2.2 and 172.217.171.196 from their systems but was unable to load any page from the browser on the same system. I cannot pin...
Hi all,I've recenly reimaged asa 5506x to FTD 6.2.3.16-59, activated evaluation licences (all possible) and configured for my home purposes. Initially I had idea to enable Security inteligence option for network and URL .... as a reosult of this I lo...
Hi all, I have 2 FTD with HA and managed by FMC. They are fine. Just since one week, i have this critical in my FMC : (see below) :can someone help please :
