Hello All, we need to disable SSLv3 on cisco ASA(v9.12(4)4). below are some out of ssl, ASA1# sh sslAccept connections using SSLv3 or greater and negotiate to TLSv1.2 or greaterStart connections using TLSv1.2 and negotiate to TLSv1.2 or greaterSSL DH...
Forum Posts
I am having repeated issues with ASDM crashing while loading. The ASDM launches successfully, show me the screen where it is discoverin device version... gets to 17% and the crashes. No error message, no windows error screen, just the program closes....
I was using CML and found a strange behavior.ASAv is not behaving well. In one of the labs, logg enables starts to work and in the other one, it does not. I have attached the Fwc------Router-------FwB logs and topology, but the VPN will not come up ...
Resolved! Any plans for a Java-less ASDM for ASA?
Is a java-less version of ASDM or a GUI of similar function in the works? Thank you.
Hello, I would like to know if it's possible to obtain the serial numbers of ASAs through Cisco CSM, I ask this because our office has 200 firewalls managed by CSM and this labor is complicated when accessing one by one.CSM version: 4.20.0 Thanks in ...
hi, i used ftd in version 6.2.3.7 AND MY FMC SERVER IN 6.2.3.16 i have this message when i add my ftd in my fmc i use this cimmande "configure manager add X.X.X.X pass "getPeersByRole: unable to connect to db at /ngfw/usr/local/sf/lib/perl/5.10.1/SF...
Hi,In my office we have implemented an FTD v. 6.2.3.13 (ASA 5506X), we want to manage it in a remote branch with FMC.DiagramI have read the cisco documentation:https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fmc_remote_branch/dep...
Hi,I have FMC 1000 in high availability deployments. FMC backups include only configurations. I use the scheduler on an FMC to automate backups. FMC manage 10 FTD with IPS policy. Backup size is approximately 2 Gb. Backup time is longer than 8 hours...
Resolved! cisco ASA failover configuration
I currently run a ASA 5525-X in active/standby routed mode. Is there a way to make the primary unit always be the active? Other firewall manufactures allow you to give the active and standby units a preempt priority level unique to each unit. When co...
Hello Experts @balaji.bandi @Rob Ingram @Marvin Rhoads @Giuseppe Larosa @Marius Gunnerud I want to block 10.170.150.188 IP blocked for Outside interface (Internet access). TMGHQ5516(config)# packet-tracer input inside tcp 10.170.150.188 443 8.8...
Resolved! Update FTD Devices
Hello, after trying to upgrade ftd 2130 from version 6.2.2 to 6.3.0 in a pair of high availability, one device was successfully updated, the second showed an error.entries from the update log on a failed device:admin@firepower:/ngfw/var/log/sf/Cisco_...
Hi All , I would like to know how to monitor threat detection on ASAv . I found some information from link below . I see the command "show threat-detection rate" but I'm not sure this information can show via snmp or oid for detect or not ? And Can s...
Hello Guys, Is there any way to whitelisting TCP/UDP port from Cisco FTD? From the connection events we saw that some of the specific ports are being blocked.
So, we have the need to "whitelist" several domains with wildcards. Now i have learned FQDN objects can't have wildcards in them, but what is the way to go if i need to whitelist wildcard domains for HTTPS traffic, in this case?
Hi Everyone, I would like to know if it is possible to create a VTI on FTD to peer with cloud infrastructure or with other FTD with a S2S VPN and BGP running on top of it. I know this works currently on ASA code since a long time so I would be very s...
