hi,i'll be configuring a pair of 5506-X for HA/failover.i know there's a caveat for its design starting on 9.7 code.https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/5506X/5506x-quick-start.html#id_66725i don't need FP in this case. my q...
Forum Posts
Dear Concern,Greetings. We want to block below MD5, SHA-1 and SHA-2 values from our Cisco 5508-FTD Internet Firewall. Please suggest us how can we block them.MD5: 49c2b4c7b1e357a021c4652ca6bc5288SHA-1: bca52704bab942e18f8efe755d110f1870b61ef7SHA-2: ...
Hi, Are there any ways of having publicly trusted CA sub ordinate CA installed on Firepower so not all machines have to trust the certificate which is re signing the ssl decrypt? Say if you get a certificate signed by godaddy, when you do ssl decryp...
Hi, I have 2 ASA5516 configured in failover mode.On the primary active firewall, I am able to copy an image to it via FTP and also do other things. On the Secondary standby firewall, I tried copying an image to its disk0, but I got the error; "Comman...
Take a look at the attached FirePower Access Control rule. Does the attached rule mean:FirePower, Access Control1) Block outbound connections for all SQL apps only on destination port 1433 or 2) Block outbound connection for all SQL apps on any port ...
Resolved! Virtual FMC vs Appliance FMC
Hi Experts, I would like to upgrade from virtual FMC to an appliance based FMC. IMO, the appliance always wins, but i need to build a business case for this shift. I've noted a few points to justify this requirement, but i need a lot more to convince...
Hi,Is there any tool or an easy way that I can consolidate two ASA rule bases into a single rule base? Thank you,SR
Anyone help me to get below Firewalls End of Life and End of Support link. Firepower 2140 Security ApplianceFirepower 4110 Security Appliance
Trying to ping the gateway on FTD from a DMZ vm on that network but unable to. Tried pinging from FTD to the vm IP and still nothing. I configured ICMP settings (under FMC > Platform settings > ICMP) to permit all ipv4 between the outside and DMZ zon...
Resolved! ASA 5516 firmware upgrade
Hi,I would like to ask about ASA 5516 firmware upgrade.i noticed cisco release 9.8.4 interim in 02 jun 2020.9.6.4 in 06 May 2020. 9.14.1 interim in 28 May 2020.So how to chose which one is stable and update release ?
hi,i configured an ASA FW for anyconnect RA VPN with two VPN policies/profile: a group policy (and a tunnel-group) for FULL TUNNEL and another for SPLIT TUNNEL.how do i "hardcode" to consistently display the FULL TUNNEL group/profile on the anyconnec...
Hi I am making a script which requires me to call multiple devices through API. I wanted to know that what is the maximum number of API calls that can be made for Cisco Firepower Management Centre at a single time.
I can deploy FTDv 6.2.3 fine on a ESXi 6.0 host, but anything after that, I get no prompt once the firewall boots, which mean I can't add it to a manager. I even tried FTDv 6.6. I can deploy 6.2.3 then add it to the manager, but if I upgrade the fire...
Resolved! FMCv Upgrade Failed From 6.2.3 to 6.4.0
Hi there folks! I've run into an issue with my FMC upgrade. Trying to go from 6.2.3 to 6.4.0 and It dies at 22%. I originally started the upgrade from the GUI but since it failed I only have CLI access now. I ran the upgrade_resume.sh as instructe...
Hi, very new to this and unfortunately in a position where I need to try and get some config working without having learned all the basics and core concepts yet. I'm using the ASDM for configuration. What I am trying to achieve - An internal IP addr...
