While I was configuring my ASA 5506-X NGFW , the management IP address has reset suddenly and am unable to use the management web interface to configure the firewall. I tried to set the ip address using the command configure network ipv4 manual 10.30...
Forum Posts
Resolved! Hide a subnet to another subnet - NAT
Hi An easy question for the experienced Cisco Community. I'm configuring an ASA5506 for a simple task. Yes, I know - it's old, but that's what I got right now. I need to isolate an IoT-subnet inside my LAN and I figured that the best way to do it, is...
Hello, I wish to update my ISR 4331's Snort virtual container using the community signature package. I understand the IOS commands to "configuring signature update from a local server", but I am not sure how to create the web page to post the signatu...
Resolved! FMC Firepower management interface
Hello, On an FMC 4000, is it a requirement to use the copper managment interface or is it possible to use a fiber interface as management? If so, how is that accomplished?
Resolved! Firepower Access Control Rule Inspection
Dear Community, I am wondering if there are any best practices when it to enabling the intrusion/file inspection on the Access Control Rules. Is it a good idea to enable the inspection on all rules or just certain ones? What are some guidelines/best ...
Could you please guide me to get the Visio stencil for - FPR1140-NGFW-K9 Cisco Firepower 1140 NGFW 1U Appliance.
Hi, When FMC active goes down,the standby do not become active. any solution for this issue.
We plan to deploy two firepower2130 and one vFMC. Since all devices are located in the restricted network, there is no internet access and no proxy Internet service. Can I use the classic license method to activate the device，or the features...
Deny TCP (no connection) x.x.x.3/389 to x.x.x.4/445 or 60637 or 57497 flags RST on interface VLAN 10 and 11 These logs are generated when a sys admin is trying do demote a domain controller and remove from the domain properly and have the existing do...
Hello everyone! We're locked out of the Fire Linux shell on one of our FPR2110 devices. It's running: Cisco Fire Linux OS v6.4.0 (build 2)Cisco Firepower 2110 Threat Defense v6.4.0 (build 102) It's managed by a FMCv on v6.7 When trying to console (wh...
Resolved! Port based authentication using ISE
Is it possible to config Port based authentication using ISE?I know it would be possible to use IEEE 802.1x Port-Based Authentication but I need to be through ISE.Any implemented case?I have to implement this on IOS & NX-OS appliances
Hello, We are at very initial of planning to integration of Cisco ASA under Cisco Defense Orchestrator - CDO. I am not able to find much document or section, which explains about my question and looking forward some guidance from the experts here. O...
Resolved! The FDM Equivalent of selecting a public IP for PAT not directly connected to the outside interface.
Hello, Any help with this is greatly appreciated. We just recently purchased the Firepower 1010. I am trying to specify a public IP address that is not directly connected to my outside interface. For example, in the 5540, you can select use PAT, then...
Currently we have ISE 2.7 installed in LAB environment on SNS-3595-k9 appliance. We are planning one skipping 2.7 and go to 3.0 on our production. I would like to test fresh install without having to upgrade from 2.7 but I am unable to find any do...
We would like to increase the default 250GB disk that comes with the virtual FMC to 500GB in order to store more connection logs on it. We came along this post that talks about just increasing the disk space:https://community.cisco.com/t5/network-sec...
