Hello Network Security Community, We have a new FPR-1010, without additional feature subscription. What are the options to license it when both Internet access and FMC are not available? We do have a Smart account though. Thanks for your advice and...
Forum Posts
Resolved! ASA5555 with Firepower Service error
Hi guys,I have an error as pictures below and I do not know why and how to fix it.I appreciate if there is any help from all of you.for more details:- The error occurs on Standby device, the Master work properly.- There is no log of this error.If you...
Hi there,Thanks for reading. I have a subinterface (SI) on a physical interface (PI) on an FTD 1150 which is directly cabled to my core switch C4500. The core isn't receiving arps for the SI IP address. FTD:PI: Routed interface; no IP, enabled.S...
Hi AllTo show up the ASA as a hop in a traceroute, one can use the 'set connection decrement-ttl' feature in a policy map.During my tests I recognized, that this behaviour only affects IPv4 traffic.An IPv6 traceroute still does not show the ASA as a ...
Hi, I'm on my second attempt of trying to upgrade the FPR2140 to 6.6 from version 6.3. followed the 6.3 guide and it mentions that during the upgrade you get logged out of the GUI, and that it could take 30+ minutes to complete. The guide says not to...
Hi Guys! I'm trying to understand which is the best tool for detecting and fixing security Vulnerabilities in Cisco devices. Please share your opinions and thoughts as well as recommendations as to which tool will be more efficient. Thanks & Regards...
Resolved! Setting up DMZ zone
Hello @balaji.bandi @Aref Alsouqi @Marius Gunnerud @Rob Ingram @Nithin Eluvathingal @Richard Burts @Marvin Rhoads I have one Web server(VM1) which is uses other server as a database server (VM2) and use 3rd server as application server(VM3). Only...
We have a remote location (3+ hours from the main office) that has an ASA-5508 running 9.8(4). We were troubleshooting a VPN connection, but for whatever reason we lost management access. The site-to-site VPN tunnel is partially up in the sense that ...
Resolved! FXOS Upgrade Question
Hi Community, I am currently upgrading the FXOS on a pair of 4140 FTD appliances from 2.2 to 2.8. And part of the procedure is to run the following commands:Firepower4100# scope systemFirepower4100 /system # show firmware monitorFPRM:Package-Vers: 2....
Hello, I am looking to upgrade my ASA on Firepower 4110.. Currently i am on version 9.8 While trying to download the image from Cisco i can see 9.12.4 Interim marked as a golden star and listed as Cisco "Suggested"... Does this mean this is the most ...
I am struggling to make sense of the Cisco documentation for firewall rules required for Cisco Cloud Video Interop (CVI) for Microsoft Teams. This is for an environment where videoconferencing traffic is not allowed in or out unless it is explicitly ...
Hi, Has anyone tried integrating Okta or any other two-factor authentication with captive portal on FTD. Couldn't find any configuration example on the same. Any help would be great. Vaibhav
Hi Guys,I am using an ASA and I configured a simple OSPF for its routing so that I can do load-balancing to my 2x routers upstream. Within the OSPF process, I configured redistribute connected subnets so that all connected subnets behind the ASA will...
Hi, Very brief, our setup consist of ASAs with FPMs sitting at remote branches, the main office, and datacenter. Currently we're using the same intrusion policy on every edge device. Would it be beneficial to deploy separate intrusion polices on eac...
Hi All ,We see CPU high on Cisco ASA5555 and We found SIEM configure incorrect some parameter so many log generate via firewall.Cisco ASA deny log . I'm not sure this situation Can we protect on Cisco ASA ? Please advise me.
