I'm new to dealing with the FMC and FTD, and new to working directly with Cisco Products in general, but I'm wondering if anyone could point me in the right direction regarding detection for ARP Poisoning from the FTD appliance. So far, I have tried ...
Forum Posts
Resolved! FMC/FTD Pre Filter question
HiIf I create a pre filter rule (fastpath) do I still need a rule in my ACP policy which matches the prefilter or is the prefilter all I need to pass the traffic through the FTD.??Also the traffic for the pre filter is going through a site to site VP...
Hi All ,I try to find the information about Monitor for Firepower (ASA Appliance) but I'm not sure Firepower can collect stat & report (, Daily ,Weekly ,Monthly , Yearly ) following information below or not . Please advise me . CPU --> Usage and Hig...
Hello Please Help FPR4125 *9EA (Version 6.4.0.9)FMC4600*1EA (Version 6.4.0.9) FMC deployment failed Only 1 out of 9 will fail. detail logOct 5 17:08:24 System (/ngfw/usr/bin/rsync -a -L --no-owner --no-group --no-perms --safe-links /ngfw/var/cisco/d...
Hi, I would like to ask someone if any of you here guys tried to configure ospf cost in subinterfaces of Cisco firepower 1140, it won't accept configuring ospf cost in more than 1 subinterface of the same physical interface. We have an old ASA 5512 f...
Hi, I think there is a bug in AD Identity objects downloading in FTDv ver6.4-6.6. When I set the Base DN to includes a sub OU which like "OU=Users,DC=firepower,DC=local", and deploy the configuration, none of users or groups will be downloaded. If I ...
Hello!I'm wondering if it's possible to use the Alarm notification Policy with Cisco ASA? The policy we created works on routers and switches (sends an e-mail on config change) but it doesn't seem to work with Cisco ASA. Is it not supported? Thank yo...
I just tested blocking ign.com, but I can confirm it does not block versign.com. Thoughts? I seem to be in conflict with the documentation below. I'm testing with FMC and FTD 6.6. Screenshots attached below. When I go to versign.com it see it's match...
Hi Allas you know if an ips signature Triggers By a traffic you can download Packets of that traffic in .PCAP format from Analysis ->Intrusions ->Events .im looking for a way to download that PCAP files without accessing to FMC Web interface.is ther...
I have attached a simple setup that I cannot get to work with real equipment. I used packet tracer as more of an illustration to explain the problem but it works in packet tracer. The equipment is not avail in packet tracer so I labeled what I have a...
Hello,Not able to bind my certified signing request. And I have already imported my root cert under trusted certificates.
Is anyone using TA-eStreamer 3.6.8 with Splunk Enterprise Security? Although the add-on says it's CIM 4.x compatible we're not seeing any of the cisco:estreamer:data sourcetype matching data models. Looking at the add-on it doesn't have any tags.conf...
Keep in mind that this is an FTD managed by FMC, so mostly all config was Pre-Deployed by myself using GPO in the backend.SBL is working fine but it's picking my "Mgmt Tunnel VPN" Profile, which is the incorrect one. How does SBL choose the Profile? ...
Hi I need to install ISE in attached USB drive because the drive c is not big enough. vmware workstation is used as platform in my drive c. but during i install the ISE and let ISE install in the USB drive(500G), I got error message, which tells the ...
Hi, Is there any way I can change management address of a virtual FMC without first remove the FTD from the FMC and then re-register the FTD after I changed the IP address?The issue is that the customer already have VPN tunnels configured and there i...
