From the presentation BRKSEC-2020I am kind of confusedAre they talking about distributed(interchassis on stackwise or VPC) src-dst-mixed-ip-port hashing on LACP for load balancing?!First of all I am using Catalyst 9500 and it's not included on this s...
I have China geo-blocked, both as a source and destination (separate rules of course), yet still see Intrusion Event blocks for traffic originating in China. Is this working as designed? The intrusion event based block is based on a malware signatu...
Hello, I want to ask about Firepower default root password for IOS version 6.4.0 ?
I uploaded the ISO to a SCP enabled server. When attempting to re-image the Firepower Device (8130), I put in the IP address, authorized user name for the SCP server, full path to the ISO image directory (/home/username), and password for the usernam...
Hello all, I have 2 ASA connected with a similar configuration than the attached file. If I need to connect, let´s say, 10 more ASAs between them (full mesh). What is the easiest way to do it? I have to create new tunnel-group and a interface for eac...
I am trying to setup an AnyConnect SSL VPN connection and receiving an IPsec error? The error I am getting is:"The IPsec VPN was terminated due to an authentication failure or timeout"The Group policy that I am using has only SSL AnyConnect checked ...
I am simply trying to remove the last light (highlighted in bold), but can't figure out how to do it... access-list outside_1_cryptomap extended permit ip object-group Dupont object-group MECaccess-list inside_access_in extended permit ip object-grou...
Hello, I know that QoS is supported for routed interfaces on Firepower Threat Defense devices only.There is a way or workaround to limit de bandwith use of Youtube, Facebook, for example, in a rule in the FMC administering the SFR module of ASA with ...
What is the cost of a cyber vision license? Do you only need one for a network? Or one per IC3000 switch?
Hello, Can anyone assist me with see why I only get half the Network Speed on my ASA. I have 1GIG Internet and I can only get 500 Mbps or less when using the ASA5510. Is this a license issue or something? I changed the speed to AUTO/AUTO or FULL/FULL...
Hello all, I am trying to send an e-mail via EEM using authentication.action 1.0 mail server "$_email_server" to "$_email_to" from "$_email_from" subject "$_event_pub_time:Test" body "$_syslog_msg" source-interface GigabitEthernet0/0/0 port 587 secur...
Hello Team, we have new cisco firepower 1010 & it come with FTD IOS. we want to use this as ASA. can someone share simple process to convert FTD to ASA.
I am trying to add an identity source and fill in all the fields. But the test failed:"Cannot connect to realm for Identity policies. Message returned: The connection test failed with an unknown error."Domain controller is available from FirePower, t...
Hello Guys @balaji.bandi @Marius Gunnerud @Rob Ingram @Aref Alsouqi I have a internal lan interface: 172.16.10.1/24 and it is gateway. 172.16.10.40 is another router connected internal for specific external routes . so any traffic which goes fro...
Hi everyone,I’m having a strange issue with a new FirePower Threat defense installation My Company has an MPLS that connect all the branch offices and an Internet connection for Internet Navigation The FTD is configured in routed mode just to protect...
