We have 2 ASA 5516 w/firepower setup in Active/Passive mode. Every 2 days or so the firewalls become inaccessible. We cant get to them internally, internet access is blocked and all incoming VPN traffic is blocked. If we reboot the firewalls they c...
Forum Posts
Hi, We are planning to implement 2-factor authentication for administrators managing the firewalls. Can we authenticate the FMC administrator with 2-factor authentication. Couldn't find any documenation or configuration examples around it. Vaibhav
Good Evening.. We are needing to restore our Active ASA to an earlier date in an Active / Failover setup. They are both ASA 5545X's running ASA 9.14(1). What are the best practices in doing so? We have one folink between the two ASA's. Should we disa...
Hello!We have Cisco ASA5508X with FTD on site. Twice in one month happened, tha ASA suddenly stops passing traffic. When the reload command is issued, it starts working for a few seconds then reloads itself. After reload works normally. I didn't find...
Hi Can anyone tell me which version of code is the best to go from 9.6.14 on my ASA5545 that addresses all the latest vulnerabilities?And can I go straight to that release from my current version.CheersCarl
Hi,I am having some problems on FMC regarding the population of the username field. On FMC, Analysis > Users > Active Sessions the column Username is being populated with the information provided by the integration of the Microsoft AD and Cisco ISE-P...
Hi!I 'am developing about getting SourceFire info.I wanna find JSON server in SourceFire because I have to get vulnerability fixes information.Can I get vulnerability fix info in the other way ,not JSON?
Hi,We have a project where we need to configure many FTDs who's configurations will be almost identical other than MGMT IP, interface IPs and hostnames. The LAN subnets to be used in NAT and ACP policies will differ slightly too.The FTDs will be FMC ...
Hi everyone, I want to ask that , is there a way to force VPN Client of Firepower Firewall always connect VPN everytime VPN client on user machine detect that computer have Internet connection. If not enable the option "Always connect", then it canno...
Cordial saludo, Se ha reportado desde la administración de firewall que hay solicitudes SSH de un nodo ISE a diferentes usuarios de la red (diferentes usurarios en diferentes subredes- este trafico por política es denegado), Hay alguna característic...
Can the Cisco ASA 5525-X be configured with 2 ISP's? Could I use two Cisco ASA 5525-X's and then configure each one with 2 ISP connections for fail over?
Good day. Please tell me how to transfer the database to HA mode on standby FMC.log from standby FMC /var/log/syncd.log Config database is not in HA. at /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/HADC.pm line 3765.Config database is not in HA. at /...
Hello Dear, In Cisco ASA 5506 using ASDM when configuring Remote VPN, it asks to use LOCAL users or AAA/RADIUS users. choosing LOCAL users is easer choice.my question is there any way to configure remote access VPN on FTD/FMC using LOCAL users, if th...
Hi, I have to upgrade our Firepowers 2110 running just as FTD (ASA not deployed) for first time and I would like to confirm the steps I should follow in order to try to do not miss anything. Checking the Cisco documents I have found that I can direct...
Resolved! ISE-PIC and WMI Configuration
Hello, I am trying to configure WMI between Cisco ISE-PIC and Microsoft AD but it isn't working... from the debug files, I can see some sort of missing permissions: 2020-07-23 15:56:05,562 VERBOSE,139823415269120,Extended Error code: 60190 (symbol: L...
