Hi team, I have 2 FMC 2600 hardware appliances. i want to setup dedicated link for both FMC synchronization. so i decided to use Fiber port. what would be the recommended SFP module speed (1G or 10G). Thanks in advance.
The Scenario:On the ASA in CLI I can ping 8.8.8.8 and google.com successfully.On a host(PC) I can ping 8.8.8.8 successfully but cannot ping google.com (ping request could not find host google.com)I am fairly new at all this but understand most of the...
Hi, I am trying to create an ACL for a host in DMZ which can receive emails from the outside, and send emails to one of our exchange servers internally. Also, to have HTTP/HTTPS access to the host from one of our jump boxes. This is what I used:ip ac...
Hi, we are using local users on our ASA for remote VPN access and want to give them no further access on the ASA. Therefore we set their Access Restrictions to "No ASDM/CLI" as per our policy. Unfortunately one of our admins recently forgot to change...
FMC 6.6.1When adding IP's to the whitelist the FMC does not show anything in connection events. these just disappear.Trying to get this SSH_EVENT_RESPOVERFLOW fixed as I have legitimate traffic that is getting blocked.Pre filtered it using fastpath. ...
I have an FMC with an FTD v6.6.1When I try to setup a packet capture w/trace on the FMC for this FTD I get the following error message when I try to save (apply) the capture: "Unable to execute the command properly. Please see logs for more deta...
Hello everybody, our customer's FMCv 6.2.3.16 shows the process SFDataCorrelato on 100% CPU load and nobody is able to login on GUI.admin@firepower:~$ top top - 07:37:23 up 231 days, 21:40, 1 user, load average: 1.45, 1.41, 1.55 Tasks: 164 total, 1 r...
I have a client that is deploying a large number of ASA's w/ FirePower. Most of them when they joined FireSight are working fine, but there are a handful that are having issues with time synchronization. If I do a show ntp on the module that is hav...
Hi All,After configuring both the router and firewall for LAN internet access the LAN computers was able to ping 8.8.8.8, 4.2.2.2 and 172.217.171.196 from their systems but was unable to load any page from the browser on the same system. I cannot pin...
Hi all,I've recenly reimaged asa 5506x to FTD 6.2.3.16-59, activated evaluation licences (all possible) and configured for my home purposes. Initially I had idea to enable Security inteligence option for network and URL .... as a reosult of this I lo...
Hi all, I have 2 FTD with HA and managed by FMC. They are fine. Just since one week, i have this critical in my FMC : (see below) :can someone help please :
Hi all, we are using an ASA5585X-SSP40 with Firepower in inline-mode. For the last days we have trouble because of high CPU load. There are two CPU (CPU04 and CPU06) with alternate load. If one CPU load decreases, the other one increases and vice ver...
Hello,I preparing for migration from ASA Multi-Context to FTD-Instance. I read below document, but I don't find answer for my question:https://community.cisco.com/t5/security-blogs/migrating-asa-multi-context-to-ftd-multi-instance/ba-p/3893465Maybe s...
Hi GuysI need get a license and activate-key for this Firewall below. Any thoughts? activation-key ?<0x0-0xffffffff> Enter four-or-five-tuple activation-keynoconfirm Do not prompt for confirmationSerial Number: XXXXXXXXRunning Permanent Activation Ke...
**bleep**, what a mess. Tried to migrate a 600+ rules access policy (no NAT, ...) from Palo Alto to Firepower FMC 6.7.0.1. Already lost 2 days. I better start doing it manually. Last errormessage:Migration Unsuccessful!Error while pushing access rule...
