Hi there,i am using two firewall Cisco Firepower 2110 as an external internet firewall and 2nd cisco firepower 2130 as an internal Data Center this firewall only used for different VLANs and server-level authentication. External(Internet) firewall is...
Forum Posts
Hello Community,I am experiencing a strange behavior with a Dynamic IPSEC VPN Tunnel between an ASA and a IOS router,Both ph1 and ph2 are successful. When I try to ping a local resource in either directions, packets go through the tunnel, decapsulate...
Hardware Info:Cisco Adaptive Security Appliance Software Version 8.0(3)Device Manager Version 6.1(1)ASA5520 Problem:Hi Guys, I am trying to block this VPN attempts to my vpn box but by some reason I am not able to do it. I have already blocked this I...
Hi, I have enabled default IPS Policy "Balanced Security and Connectivity" on FMC. Now wana setup automatic email alerting in case any Intrusion events. I can send email to my self when test it but not getting any events. Am I missing anything here.
Does Cisco ISE work simultaneously with AD and Radius server?
Hi , I am enabling default IPS policy "Balance security and connectivity" for 1500 rules. Since I needs to attach it with every access control policy so its gona take too much time. Can we do in one shot to enable IPS under all access control polices...
Hi,I cannot see informational logs ,even if choose debugging under real time logging in monitor tab current logging section is below . logging enablelogging timestamplogging trap informationallogging history criticallogging asdm errors , Is i...
Resolved! How to confirm that certain CVE# is included in specific SRU for IPS (1500 FMC and 8250 Sensors)?
We have many CVE numbers and we need to make sure that our IPS is aware of them and we are protected against them. Whenever we search by the CVE# from the FMC GUI, it shows nothing as the CVE# is included explicitly in the details not the main info. ...
Hello for everybody. Can someone tell me please - is there policy-based routing in firepower 1140? This device is managed via the FMC 6.4.0 version. https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v6...
Hi, I have a few ASA's with FirePOWER modules. The FirePOWER modules are being managed by FMC and each has a Protection, Control, URL Filtering & Malware license allocated to it. If I were to re-image the ASA to the FTD image, how does the licensing ...
Hello, I am using Cisco ASA5525 firewalsl in active standby mode. It is running on version 9.9. I want to upgrade it to 9.12 version.I have copied the image file to active unit using scp. however when i try to copy the file to standby unit, it gives ...
Resolved! FMC and AD integration
Hi Experts, We've ASA with sourcefire (6.4) running and in the network I manage, I see no AD agent configured (System->Integration) but I do see usernames under user activity.There is no realms or the identity policies configured. Under the user act...
Cisco Catalyst 3750 Series not showing ip addressSwitch#sh running-configBuilding configuration...Current configuration : 2247 bytes!version 12.2no service padservice timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hos...
I do quite a few ASA to FTD migrations and many customers want a "Big Bang" approach. I am familiar with all the Migration tools that Cisco offer but they do have their limitations. The limitation for me is that I have a customer who has 200 static r...
