We upgraded our FMC to 6.6.1 from 6.4.0.9 last evening.Everything is working, but we have a warning in Health Monitor: User Agent has been deprecated and will be removed in a future release. how do i clear this up so I don't have a warning on my syst...
Is there a report that can be generated which shows access switches/ports that do not have ISE commands on them?
Hi, I'm looking into getting a firewall with Firepower Threat Detection. I want to know if this will give me any SQL Injection protection via the IPS. I've looked this up and I see old entries from the Cisco Community from 2008 and 2011 that mention ...
I wanna configure a port forwarding on ASA so users can register their smartphones, wherever they are, on company PBX. I did configs as below, but softphone not registering. Can you please help me?:ASA Version 9.6(1)!interface GigabitEthernet1/1name...
Hi!I have fresh started Firepower 1010 with FTD 6.4.0-102 on it. I'm connected to Cisco Smart License service. The issue is I can't submit any changes I did in web interface to running config. What I do:1. Make some changes.2. Press that round grey b...
I am trying to post a rule using {'action': 'BLOCK'} but this is failing. If I change the action to {'action': 'ALLOW'} the POST is successful. I have configured a rule with the block action in GUI and then checked the output in api-explorer and th...
Hello Cisco Community I'm running into an upgrade issue - I'm looking to see if any anyone has come across such an error when upgrading "FTD (41XX)" from 6.2.3 >>>> 6.6.x - see below Upgrade_status.log-----------------------PERCENT:[ 3%] MESSAGE:F...
Can some please help me understand following ACL. object-group service SERVICE_Object service-object tcp eq 30175 service-object udp eq 30175 access-list OUTSIDE extended permit object-group SERVICE_Object 1.1.1.1 2.2.2.2 is it 1: any traffic from ...
When manually submitting files for analysis in Threat Grid you can opt to have them Private or Public. Are those submitted by the automatically from the FTD private or public or is this a setting one can choose? The worry is that company sensitive i...
Hi team, I have configured Cisco ISE as TACAC+ for firepower chassis. i am able to authenticate chassis with TACACS+ credentials.But when i tried to login security engine which is not authenticating with TACACS+ but i can login using chassis local us...
Hi Cisco Guru, I'm currently using FPR1K running FDM code with outside interface is DHCP. However, since our ISP subscription is dynamic IP and they may sometimes force to renew a new IP and when this occur, my FPR will keep the old IP even disable a...
hello Team, In FTD remote VPN is working perfectly.. and users are getting IP address as per the VPN profile.. the problem is that.. how should the same would work with static IP address.. As per the India DOT guidelines, the customer need to have st...
Hello, I have a simple question to understand the behavior from the ASA side. Once the connection is marked as half-closed , during that ( 30 seconds ) if the ASA will receive a syn packet related to the original connection what will happen exactly ?...
Hello, I would like to ask about the management addresses of Firepower 2120It has one IP for the chassis management and one IP for the ASA management. By default they are in the same subnet. Is it necessary to be in the same subnet? How do I change...
Hi all, I'm sorry for opening this discussion even if there are many other similar on the community, but none of those solutions worked for me. I'm managing an ASA5516-X with firepower that was working fine with ASDM since some weeks ago.The issue th...
