Hi! I have a question regarding DDNS and FTD. We get a DHCP address from our ISP on our outside interface which we're using for our VPN clients. We want to bind this address to a more convient name for example: vpn.example.com. I've read about DynD...
Forum Posts
Dear community,we have recently noticed several false positives on our IPS based on Firepower Managment Center, in particular signatures: MALWARE-OTHER Win.Trojan.FANCYBEAR variant binary download attempt (1:56933:1)MALWARE-OTHER Win.Malware.Ursu-982...
Hi team,The FMC is generating the alert like below.SECONDARY (xxxxxxxx) FAILOVER_STATE_STANDBY_FAILED (Check peer event for reason)Both FTD 9300 are in HA over a port-channel. I have checked both port-channel physical interfaces are in matching the ...
Hello Communityi am tryig to do PBR flex config in my lab environment . 1. I have 2 internal subnets 10.1.1.0 /24 and 192.168.1.0/24 2. i want 10.1 should take isp-1 and 192.168 should take ISP-23. did extended ACL and tried Flex config , but getting...
Hello everybody, a cusctomer has a Firepower 4110 running 6.6.0 and configured by FMC.I have a pricipal question:Is it possible (and if yes, how) to let pass a certain UDP broadcast from one IP network to another when the FTDhas own interfaces in bot...
Hi there,We've got pair of ASA HA 5525 firewalls (v 9.12) configured with 3 interfaces (Outside,Inside, and DMZ). We would like to configure NAT rules for a window virtual web server (IIS) that will host 3 websites (each website will have public IP a...
Resolved! Firepower Policy and Domain Question
Community,In the FMC, is there a way to move an Access Control Policy that was created under a subdomain into the "Global" domain? Or do I have to completely recreate the policy in the Global Domain view? When I try to copy the policy it just places ...
I've read through Cisco ASA documentation and saw that IPv6 multicast routing is currently not supported. Was wondering if this is a work-in-progress or is this a feature that will never be offered for ASA 5500-X series firewalls?Also, since IPv6 mul...
Firepower 2120 ASA Software Smart Software Licensing: Cisco AnyConnect Plus License 1500 "In Use" = 0VersusCisco FPR/ASA VPN Session Summary - AnyConnect Client: 500 Is there still no implementation to count the session at Cisco Smart Licensing?Exper...
Let's say that I have a few Sourcefire 3D Sensors (8130) and a Sourcefire Management Center that are on an OS that is before 5.4, one of them being on a version that's a bit older. What are the suggested upgrade paths for these devices? I know that I...
Hi, I have a critical notification on my Sourcefire - Health Monitor. It says "Module Disk Usage: High unmanaged disk usage on /Volume" even though the Sourcefire has a lot of free memory.Please tell me what can I do with the "/Volume" directory to f...
Hi all,While running a packet capture on an access switch for a device (10.1.1.1) I blocked it's internet access on the FTD (4125) as it was trying to reach 50.1.1.1.I did this by blocking all traffic for 10.1.1.1 through the FTD with a "Block with R...
Resolved! ASAv unlicensed after reboot
Hi all, I recently upgraded one of our ASAv's to code 9.12.4-10 as an interim code, just to keep a customers appliance up to date. Upon reboot, the device was alerting as unlicensed and therefore ran at a rate limit of 100kps and with (i think) up to...
I am currently having to configure a new C921-4P. I have read over the documentation and crawled the internet but cannot find anything that can help with a few requirements I need to fulfill. These requirements are from the L3 switch stig. 1. Disab...
Resolved! Firepower feature question
Dear Community, On the ASA there are a few options that dictate what traffic can flow between interfaces. These options are: -Enable traffic between interfaces that are configured with the same security level-Enable traffic between two or more hosts ...
