Dear Community, I am wondering if there are any best practices when it to enabling the intrusion/file inspection on the Access Control Rules. Is it a good idea to enable the inspection on all rules or just certain ones? What are some guidelines/best ...
Could you please guide me to get the Visio stencil for - FPR1140-NGFW-K9 Cisco Firepower 1140 NGFW 1U Appliance.
Hi, When FMC active goes down,the standby do not become active. any solution for this issue.
We plan to deploy two firepower2130 and one vFMC. Since all devices are located in the restricted network, there is no internet access and no proxy Internet service. Can I use the classic license method to activate the device，or the features...
Deny TCP (no connection) x.x.x.3/389 to x.x.x.4/445 or 60637 or 57497 flags RST on interface VLAN 10 and 11 These logs are generated when a sys admin is trying do demote a domain controller and remove from the domain properly and have the existing do...
Hello everyone! We're locked out of the Fire Linux shell on one of our FPR2110 devices. It's running: Cisco Fire Linux OS v6.4.0 (build 2)Cisco Firepower 2110 Threat Defense v6.4.0 (build 102) It's managed by a FMCv on v6.7 When trying to console (wh...
Is it possible to config Port based authentication using ISE?I know it would be possible to use IEEE 802.1x Port-Based Authentication but I need to be through ISE.Any implemented case?I have to implement this on IOS & NX-OS appliances
Hello, We are at very initial of planning to integration of Cisco ASA under Cisco Defense Orchestrator - CDO. I am not able to find much document or section, which explains about my question and looking forward some guidance from the experts here. O...
Hello, Any help with this is greatly appreciated. We just recently purchased the Firepower 1010. I am trying to specify a public IP address that is not directly connected to my outside interface. For example, in the 5540, you can select use PAT, then...
Currently we have ISE 2.7 installed in LAB environment on SNS-3595-k9 appliance. We are planning one skipping 2.7 and go to 3.0 on our production. I would like to test fresh install without having to upgrade from 2.7 but I am unable to find any do...
We would like to increase the default 250GB disk that comes with the virtual FMC to 500GB in order to store more connection logs on it. We came along this post that talks about just increasing the disk space:https://community.cisco.com/t5/network-sec...
Hi all, We're considering moving to Firepower 2140 to replace our aging ASA estate. One item on our roadmap in implementing private VLANs. The ASA introduced PVLAN support in 9.5(2) with the use of the secondary-vlan command - does anyone know if F...
Hello!I have configured a Active/Standby failover on Cisco ASA.What actions should be taken to prevent the loss of the control console to the Cisco ASA in failover mode during remote configuration? How do I schedule an automatic rollback of a configu...
I have an organization's network, containing 4 zones: inside, outside, DMZ1 and DMZ2. DMZ1 contains external-facing servers - DNS, WEB and Mail servers. DMZ2 hosts internal servers- Radius, DHCP, Database, File, and Application servers. All the zones...
Hi Guys,I would like to clarify with you what is the use of the SSD1 and SSD2 in FP4100 series?Where do we install the logical device such as FTD, is it in the SSDs or SSP?Thanks
