What is the best method by which to determine what policies are being used in various contexts and how much they are being used. Thinking about an auditing/cleanup process use case.
Forum Posts
Resolved! Firepower Hub and Spoke without VPN
I trying to create a hub and spoke in which there is a red network ipsec tunnel within a gray network ipsec tunnel. I am limited to the the firepower 2100 platform as I need to inspection points. I've included a diagram. The part that I am unfamiliar...
A friend spec'd out a new network, and insisted on having Network and Host IDS devices. Aren't those concepts now overtaken by AMP and NextGen Firewalls? Do we still say NIDS? Thanks.
Hi, Can we configure Cisco NGIPS in transparent mode and in inline mode simultaneously. BR
Hi All,We are having the below license's in our environment Cisco ISE base 999 permanent Cisco ISE PlusCisco ISE ApexWe are using dot.1X, posture , profiling and BYOD.Apex and Plus licenses are going to expired soon can someone please explain the im...
Do I have to use ASDM or is it possible on CSM
I am trying to activate my smart licenses, but I have the following message, I think it is a configuration error, but I could not understand what it is, my firepower 2130 has ping to tools.cisco.com.
I have a strange issue on a fresh installed Firepower 1010 box. The firewall has a normal internet connection configured, and is registered with it's smartnet contract.It is able to get the hourly Security intelligence feeds, but fails the geo, intru...
Our Firepower has been installed and is running normally on version 6.7. Cisco's smart DNS and URL often have problems-the host Cisco-DNS-Intelligence Feed cannot be determined to download files from the error message list and what causes this situat...
Hello All, We are using appliance SNS-3495 with 2.2.0.470 version patch 15. As per the notification pop, Flash player support to end on December 2020 and we are unable to login to CIMC Console for a re-imaging activity. My query1. Can we launch KVM ...
I have an ASA 5515x connected to a Layer 3 (3750x) switch with multiple interfaces (Inside, DMZ, Cellular, Guest) and a connection to a 3750 where I have VLANs, and IP Routing enabled. Not to be able to reach the internet from any of these VLANs. I'm...
Hi,I've been trying to direct the output of the "show tech" command to a file on FTP server. The FTP server has been properly setup. However, I keep getting repeated errors. Could someone please help me with the correct syntax of the command? Also I ...
Has anyone attempted to use a Firepower NGFW to stop duplicate UDP packets from continuing to propagate through a network? I have voice streams which are UDP based that are being purposely replicated/copied in a mobile radio network and based on how ...
Is it possible to pull a list of objects that are actively being used in an ACL (with hit counts)? The only mechanism I've found is the "find usage" icon beside the object. This obviously is a tedious process through the GUI with a large number of ob...
Hi all, I had one of my customers complain that FTP transfer is stopping in the during when transferring large video files(few hundred MBs) and large amount of pictures when using a hotspot on a mobile device. After troubleshooting with the customer ...
