Hi, What options (if any) are there for Virtual (VMWARE) Firepower Management Centre High Availability? I notice in the 6.1 release notes that only physical appliances are listed and the menu isn't available in my lab virtual appliance. - I'm looking...
Forum Posts
Hi All, According to the latest FMC release, it should be compatible with On Premise ADFS SSO. Unfortunately, the available tech document show the integration with Azure ADFS only, May I have if any reference / example for on premise ADFS SSO integra...
HIwe are about to buy some cisco products which needs your consultation on some features.the products are as follows:1) C9800-L-F-K9 *1LIC-C9800L-PERF2) C9200-48P-E *1C9200L-DNA-E-48-5Y3) C9120AXI-H *32QUESTIONS:1- the first item(C9800-L-F-K9), is it...
Hello. I have two Firepower works on routing mode as showed on the diagram and client domain try access to the domain controller , the firepower 1 drop the DNS packet that returned by the domain controller after passed on the other firepower. based ...
Hi all,I'm going to deploy FTD HA managed by FMC and the license qty as below2 x Threat Protection2 x Malware Protection andCisco AnyConnect VPN Plus license for 1500 userHow should I perform license registration steps on FMC?Should I fist enabled Th...
Resolved! Upgrade ASA5510 to modern device
Hello, Friends! I need your advice.I use ASA5510 on the edge on network.(I have two offices and two devices)In plan, I want to update my old devices in next year.I can add, that I need IPSEC VPN and I need Anyconnect.So, how I understand, I can buy t...
Resolved! ASA 5520 - Cannot Ping LAN
Greetings,I recently acquired a 5520 ASA. I'm trying to integrate it into my environment but I am having a few issues.When I connect with my Anyconnect Client, I can ping my inside LAN GW (even pull up the web interface), but nothing else. I have a p...
Hi all, We are planning to configure Cisco AnyConnect VPN on our Firepower. And in front of our Firepower, there are two ISR routers that is doing NAT.What I would like to know is where should I configure NAT exemption? On firepower or on Router? As ...
Firepower is logging usernames to IP address for one subnet only which is where the Cisco user agent software is installed and also the domain controller is also on the same subnet. How do I get username to IP mappings working with VLANs that are on ...
Resolved! FPR2100 with Transparent FTD
Can someone please guide the FXOS upgrade procedure of FPR2100 which is running with Transparent FTD. I feel it is a bit different from FP9300.
Does anyone know the NX-OS equivalent of the IOS command 'no ip tcp timestamp'? This would be to disable tcp timestamps so an attacker cannot gather system uptime.Thanks.
Hello, I am a beginner for ASA Firewall. I have the same problem like below link. - https://community.cisco.com/t5/network-security/asa-wildcard-fqdn-object-acl/td-p/3062312 So I have read some articles for this subject. Then the conclusion is that ...
Resolved! SSH to a specific host IP
Hi all,I'm trying to limit SSH access to my router.Router IP is 192.168.1.254 My access list for SSH: ip access-list extended SSH_Access_Controlpermit tcp 192.168.1.0 0.0.0.255 any eq 22deny tcp any any eq 22 log!line vty 0 4access-class SSH_Access_C...
Resolved! Firepower Logging
I am only getting 3 days of logging within FMC. I have adjusted the time frame etc and I can only go back 3 days worth of events. Any ideas here?
Hi all, I have a Firepower 2110 appliance running ASA. I recall reading somewhere that this setup doesn't support redundant interfaces. Does that apply to port-channel configuration on the ASA? Thank you
