Network Security

Virtual FMC licensing

I am building a LAB, which includes 2* FTD11xx. We have production FMC 2500 but I don't want to use production FMC to manage the FTD instead to use a Virtual FMC, Wondering if I need to buy it or available free to download!Do we need license for FTD ...

Resolved! ASA Contexts and Syslog

If I have an ASA with 5 security contexts enabled, how is syslog handled? Is it on a per-context basis, or centrally from the admin context?I'm evaluating a logging solution that is licensed per "device", where each device is a unique syslog source. ...

Resolved! 3 tier firewall architecture

Hi,I am confuse in everybody say 3 tier firewall Architecture.Let me know what is it.If i divided 3 zone and applied to three different subnet and applied to three different interface with each network,can we call 3 tier architecture?OR it must have ...

Resolved! Firepower 4115 Chassis Manager REST API - subinterface creation

Hi,I need to create a lot of sub-interfaces on Chassis Manager and was wondering if anyone has done this using the REST API ? I did look through the Cisco Firepower Chassis Manager REST API Reference guide on the DEVNET pages (although it said it wa...

Why ASA Removes TCP Option Field.

why ASA removes TCP option field, is there any security reason or something else.Ex:- Think about BGP Authentication, MD5 hash carry into TCP Option 19 field, but by default ASA Removes TCP Option field. Why?

URL Rule When IP Changes

Hi,A customer of mine is facing a problem with his firewall. He create a URL rule for some cloud applications, but when the cloud IP chages, the applications stop working.I'd like to know if the Fire Power has the capability to create a URL rule that...

Resolved! Cisco Cloud Configuration question

Hi,Maybe a silly quesiton I'm struggling to find out what Cisco Cloud Configuraiton actually is? Can anyone shed any light on what it is! It's flagging as 'Failure' under our devices on FMC. The other feeds seems to be fine. RegardsGeorge

Resolved! problem with Destination NAT on ASAv

Hi I am new to Asa doing practice in eve-ng with ASAv V 9.7 in this topology i have a server inside with IP address of 192.168.1.200 and want to reach the loopback address on R2 with IP 44.44.44.44 with NAT but i want to practice the Twice NAT...

Leap Year impact on Cisco SDM and other Security Devices

Hi, Is there any possible issue may occur on SDM and other Security Devices of Cisco since currently we are on a Leap Year. Thanks! Regards,Rhommel B.

Resolved! Unable to visit WebUI on Firepower 1010 after unregister on FMC

Hi All I got the error when visit WebUI on Firepower 1010 after unregistered on our FMC. Any idea? Thanks Error code on web broswerError code: SSL_ERROR_INTERNAL_ERROR_ALERT OS: ftd 6.4.0.4 Thanks Martin

"No new updates currently available" on FMCv 6.2.3.14

I’m at 6.2.3.14 and I want to go 6.2.3.15 then to 6.2.3.16. They should be showing up in the downloads on FMC, but they are not. Any advice, thanks.

Resolved! Export access-control rules from FMC

Hi Experts, I need to export the access-control rules from FMC to excel. Can anyone suggest a way to do this?

Resolved! Cannot commit (commit-buffer) while configuring Firepower 2140

Hello All, I am trying to enable several ports on a Cisco Firepower 2140 but when I commit the changes (commit buffer) , I get the following message: Error: Changes not allowed. use: 'connect ftd' to make changes.The change I am making from within fx...

Resolved! Routing Protocol Inspection Through ASA

do we inspect Routing protocols or routing protocols packets through asa.By default ASA allows Routing protocol packets but i we want to inspect routing protocols.