Deny TCP (no connection) x.x.x.3/389 to x.x.x.4/445 or 60637 or 57497 flags RST on interface VLAN 10 and 11 These logs are generated when a sys admin is trying do demote a domain controller and remove from the domain properly and have the existing do...
Forum Posts
Hello everyone! We're locked out of the Fire Linux shell on one of our FPR2110 devices. It's running: Cisco Fire Linux OS v6.4.0 (build 2)Cisco Firepower 2110 Threat Defense v6.4.0 (build 102) It's managed by a FMCv on v6.7 When trying to console (wh...
Resolved! Port based authentication using ISE
Is it possible to config Port based authentication using ISE?I know it would be possible to use IEEE 802.1x Port-Based Authentication but I need to be through ISE.Any implemented case?I have to implement this on IOS & NX-OS appliances
Hello, We are at very initial of planning to integration of Cisco ASA under Cisco Defense Orchestrator - CDO. I am not able to find much document or section, which explains about my question and looking forward some guidance from the experts here. O...
Resolved! The FDM Equivalent of selecting a public IP for PAT not directly connected to the outside interface.
Hello, Any help with this is greatly appreciated. We just recently purchased the Firepower 1010. I am trying to specify a public IP address that is not directly connected to my outside interface. For example, in the 5540, you can select use PAT, then...
Currently we have ISE 2.7 installed in LAB environment on SNS-3595-k9 appliance. We are planning one skipping 2.7 and go to 3.0 on our production. I would like to test fresh install without having to upgrade from 2.7 but I am unable to find any do...
We would like to increase the default 250GB disk that comes with the virtual FMC to 500GB in order to store more connection logs on it. We came along this post that talks about just increasing the disk space:https://community.cisco.com/t5/network-sec...
Hi all, We're considering moving to Firepower 2140 to replace our aging ASA estate. One item on our roadmap in implementing private VLANs. The ASA introduced PVLAN support in 9.5(2) with the use of the secondary-vlan command - does anyone know if F...
Hello!I have configured a Active/Standby failover on Cisco ASA.What actions should be taken to prevent the loss of the control console to the Cisco ASA in failover mode during remote configuration? How do I schedule an automatic rollback of a configu...
Resolved! Traffic Filtering between Security Zones
I have an organization's network, containing 4 zones: inside, outside, DMZ1 and DMZ2. DMZ1 contains external-facing servers - DNS, WEB and Mail servers. DMZ2 hosts internal servers- Radius, DHCP, Database, File, and Application servers. All the zones...
Hi Guys,I would like to clarify with you what is the use of the SSD1 and SSD2 in FP4100 series?Where do we install the logical device such as FTD, is it in the SSDs or SSP?Thanks
Dear All,I am facing one strange issue with the Network. I am unable to access some specific range of IP's from outside network of CISCO ASA-5506. Below are ten ip routes configured . I could access all the IP's except 10.1.1.0.. Access rule for all ...
Bonjour,Lorsque j'étais en ligne, une enquête sur le COVID-19 est apparue. En raison d'une attention excessive portée au COVID-19, j'ai rempli ce formulaire et, malheureusement, mon ordinateur semblait être attaqué par un virus, et il a commencé à de...
ASA 9.8(4)20...I've configured aaa-server object as :aaa-server ActiveDirectory protocol ldapaaa-server ActiveDirectory (outside) host ad.obfuscated.edu.au:Authentication & authorisation works fine..The problem is... it seems that ASA selects only th...
Hi all,we are testing a FTD with version 6.7 since this week. It's the first release we are testing because the AnyConnect port is changeable now, that means we don't have experiences with previous versions regarding bugs etc. Today we noticed that o...
