We want to enable our GEO-IP and use the whitelist/blacklist from connection events. We have a White/Blacklist of GEO-IP objects, we'd like these in the GLOBAL ACP so they are applied everywhere.No matter where I place the GEO-IP block rule, if it is...
HiI Send estreamer from FMC 6.7 to Splunk 8.1 every things work fine except that I cant send original client ip address and HTTP response code.extended option is enable in estreamer.conf:"archiveTimestamps": true,"eventExtraData": true,"extended": ...
Hi guys, I´ve got the message that we should upgrade our Umbrella AD-Connectors for all AD-Controllers.My question-> Is there any impact if I upgrade the AD-Connectors one-by-one? We´ve got 2 VA´s and 4 AD-Connectors. Kind regardsPhilipp
Hi , I'm configuring FTD HA managed by FMC.I was confused with Monitored Interface configuration when configuring FTD HA. I've outside interface going to router an inside interface connected to switch.If I put standby IP address for monitored interfa...
Hello All,So yeah, here is what the log is showing and it's been almost 24 hours, TAC is still investigating and this sucks. Any ideas and how can I stop/fix this. I'll update my post here as soon as I find a solution but I would like to see if anyon...
I have an odd situation involving two ASA firewalls that I'm trying to configure to allow traffic to-and-from both the outside world and our main private network to reach the private network of the 2nd firewall.I have no problems getting the traffic ...
Hi all, I'm trying to setup a IOS(-XE) based ZFB-firewall to filter and block traffic between 2 LAN-segments. I have a list of ports which I want to allow but I find it hard to find an example to match a port in a class map if the port does not match...
I have a pair of 5555-X ASA running 9.3(1) that I plan to upgrade to the version 9.14(1.30). I am planning this as an outage to services that traverse the firewall but am wondering what the true impact will be. Since I have two in an HA pair (activ...
Hi, There would a way to find out SFP serial number for out of band interface. I got Please serial number for ethernet ports and slots. But i did not find serial number of SFP for out of band interface.Model - 4125I have used below commandftd/fabric-...
I have two Firepower 1140 with FMCv. I have been running these in my lab environment. I want to move these to production but before I do I want start with a fresh config. I have been trying to figure out how to do this. I don't see a way to clea...
Hi I develop rule register automation application by using rest api. I would like to know rule hit-count and if it possible, last hit date. Surely, I know how to find hit-count via CLI. (show access-list) But I could not find this in rest a...
Hello.. i have a cisco 2110 FTD with TMC License , there is any way to transfer this license to Firepower Virtual
i have configured cisco asa 5520, i am here to ask about one possibility according to my needs. i have two internet connections. both are configured in cisco asa as internet. for example. 1st link = 1.2.3.42nd link = 5.6.7.8 is it possible i can conf...
Hi, We updated our FMC virtual appliance from 6.4.0.9 to 6.6.1. It has the required 32GB RAM and 4 vCPU. Since the update the CPU Usage health test in FMC Health Monitor reports as 'Test Failed'. Has anyone encountered this issue? Regards,PW
Anyway to provide Anyconnect users static IP from ASA, other than DHCP pool IP.Architecture is Anyconnect <> DC ASA <> DC ISE <> Corp AD Anyconnect users are corporate AD users. ASA sends requests to ISE and inturn to AD. ISE does some posturing chec...
