Hi, What are the benefits (if any) of having a different IPS policy for incoming traffic to internal servers and another for outgoing traffic focused on users? What is the best practice, keep a single policy for both scenarios that simplify the opera...
On FMC 4000 (running 6.4.0.9 software) I am unable to delete SNMP alerts i.e. on the FMC when I navigate to Policies > Actions > Alerts when I attempt to delete an SNMP alert, the message shown in attached screenshot appears:i.e. "This Alert Configur...
Is there an easy way to put bandwidth rate limits on our FMC Communications? Over the past few weeks there have been a few times our 100 Mbps MPLS is reaching 88% upload, and several of our smaller sites are reaching the high 90's in download bandwid...
I am trying to replace the Cisco logo in the AnyConnect client with our own. I have followed the instructions below, but have not had any success. Has anyone gotten this to work?http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconn...
We have two cisco asa 5585-X's in a failover setup.Failover Link between Primary and Secondary Unit uses external switches for connecting the two ASA´sWe like to chanke the failover link to a directly connected link between the two devices.What would...
Is there a way to combine FMC DNS SI lists by the domain name feature and a particular DNS query type? Let's say I want to avoid type A DNS queries but I let type AAAA queries to go out for domain A, but I want both A and AAAA allowed for domain B. O...
ProductsFunctionMinimum VersionRequired?Firepower 4100 or 9300Hardware platform to run the ASAFXOS 1.1.2RequiredFirepower Chassis ManagerFXOS GUI device managerFirepower Chassis Manager 1.1.2Optional; you can alternatively use the CLIASAFirewall appl...
We are using a pair of ASA 5585Xs in active/standby mode (single context, routed mode). We have a 6509e for our core switch, which connects directly to the ASAs, and the outside interfaces on the ASA connect to a single 3850 switch. This setup has be...
Hello all. I've been facing a strange problem with network and service object groups so I decided to post it here to get some help.I am trying to use the network and service object groups in an extended ACL applied to a Vlan, in a Catalyst 4500 L3 Sw...
Hi Team, I observed anydesk application is getting blocked due to uncategorized URL blocked and in connection logs i am able to see https://AnyNet Relay.is getting blocked, now i have no idea how to get this unblocked.
I'm using an FPR 1010 as a firewall for an HTTPS server. I have successfully Nat'd the port and the HTTPS server is working. problem is now I can't get to the management page of the firewall. on the old ASA's you could specify the port you wanted to ...
Please your help, I enter a URL a the whitelist and I cannot access the page. The page is: "https://bibliomedic.com/" "http://apps.bibliomedic.elogim.com/auth-meta/login.php?url=http://apps.bibliomedic.elogim.com/" I put in Objects -> Objects Managa...
from my nat understanding that static nat rule nats one private ip to a public ip , so what happens when i choose a huge number of private subnets and choose one public ip then sets the nat as static? how will this work for one-to-one natting?
Hi,Please be informed that we want to HA Configuration at Cisco Firepower Appliance 2600 Series. But we are getting below error:"" Degraded- Synchronization incomplete( Both Management Centers are configured to run in standalone mode , Database is no...
Hi, Can someone recommend a company to configure my ASA 5506-X? Thanks, Ammar
