Hi all A pen test shows us that several resources which are published to the Outside via an ASA-5545 (also with a Firepower device attached to the ASA as a module) replies on the ports tcp/2000 and tcp/5060, which is the Skinny and SIP protocol. Even...
Hello,We have a bit of an odd setup for accessing our ASA from ASDM. I will lay out the process: From our VDI instance, we open putty and ssh into a management server. After we are connected to the server over port 22, we then create a tunnel to one ...
hi,i managed to perform an FTD OS upgrade from 6.4 to 6.5 but noticed the initial config i did for 6.4 was gone and had to re-configure. i thought the configuration is persistent in flash memory. is there a prior step that i should've done prior to a...
Hi all, Does anyone know if basic IPS/IDS is included with a standard ASA OS and license installed on a Firepower 1000 series? As opposed to the SNORT system available if you install the FTD OS and licenses.Thanks!
All users are able to reach inside networks only. : Hardware: FPR-2110, 6589 MB RAM, CPU MIPS 1200 MHz, 1 CPU (6 cores):NGFW Version 6.6.1!hostname wdgngfwenable password ----- encryptedservice-module 0 keepalive-timeout 4service-module 0 keepalive-...
Hello, we have Cisco virtual ASA deployed in Vmware ESXi, and it doesn`t support TLS 1.2 only support TLS 1.0. We need to upgrade it to new ASAv. So before ordering the new ASAv we want to also order firepower services for ASAv.Does someone know abou...
Has anyone had problems with viewing ASA settings using ASDM after full SSL inspection from a third party device was turned on? We have a Checkpoint NGFW that’s sole purpose is content filtering and ssl inspection. It sits on the inside of our netwo...
Hi All, as per current setup we are using web server and object NAT has been configured, there is new requirement that new web server has been installed and clients need to be migrated from old server to new server one by one without changing the UR...
HIrecently migrated from ASA to FTD HA pair does anyone know why on the FMC I jusst see interfaces eth0 and eth1, we have eth1/1 and eth2/1 configured in a port-channel but dont see these any ideas would be appreciated. Thanks
Hello, Is it best/common practice to install a customized certificate for stealtwatch SMC or is it recommended to use the original self generated certificate? There isn't much documentation on this topic. I tried to use a CA cert in the lab and it ...
Hello, I have a 5510 and I'm trying to configure it, unfortunately Cisco thinks no one needs to use their firewall. So why am I trying to still use it? Well it's free and I'm using it as a project. A project thats been going on for years and really h...
Hi All, I am trying to add the cisco FTD as a log source in McAfee Enterprise Security Manager SIEM. However, I can only see the logs from the FMC. Does Cisco FTD support integration with McAfee SIEM? Regrads,Aniket Amdekar
Hi,I've the FirePower1010 versions 6.5.0.2.There are several interfaces:- Ethernet 1/2 with address 192.168.24.245 and is belong by inside_zone- Ethernet 1/4 with address 192.168.23.245 and is belong by video_zone But I cann't ping 192.168.23.245 fro...
Hello, Today i was configuring 802.1X in Cisco 3650 with ios version 3.7.05E, before i configure 802.1X in this same model but in ios version 16.9. When i copy all configuration my device was no authenticatech when i using "show access-session" i se...
HiI am trying to figure out what would be the best security level for management0/0 interface on my ASA firewall ? Currently I configured it with security level 100 but I am not sure if this is the best security practice so if anyone can help me on t...
