I have the internal web server 10.xx4 and NAT to the internet with the publix IP 103.xxx, how can the internal user network of the 10.xxx network access the web site through the public IP 103.xxx not over internal IP? Thank !
Forum Posts
Good morning!!! I need you help again!So what i have:FMC 6.1.0.2 (build 57)And I resrored OS from Resore image to my 7010 (Cisco Fire Linux OS v6.1.0 (build 37))But I have problem. I do not have EXPERT mode on my 7010, so i can not connect it to my F...
hi,i'll be configuring a pair of 5506-X for HA/failover.i know there's a caveat for its design starting on 9.7 code.https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/5506X/5506x-quick-start.html#id_66725i don't need FP in this case. my q...
Dear Concern,Greetings. We want to block below MD5, SHA-1 and SHA-2 values from our Cisco 5508-FTD Internet Firewall. Please suggest us how can we block them.MD5: 49c2b4c7b1e357a021c4652ca6bc5288SHA-1: bca52704bab942e18f8efe755d110f1870b61ef7SHA-2: ...
Hi, Are there any ways of having publicly trusted CA sub ordinate CA installed on Firepower so not all machines have to trust the certificate which is re signing the ssl decrypt? Say if you get a certificate signed by godaddy, when you do ssl decryp...
Take a look at the attached FirePower Access Control rule. Does the attached rule mean:FirePower, Access Control1) Block outbound connections for all SQL apps only on destination port 1433 or 2) Block outbound connection for all SQL apps on any port ...
Resolved! Virtual FMC vs Appliance FMC
Hi Experts, I would like to upgrade from virtual FMC to an appliance based FMC. IMO, the appliance always wins, but i need to build a business case for this shift. I've noted a few points to justify this requirement, but i need a lot more to convince...
Anyone help me to get below Firewalls End of Life and End of Support link. Firepower 2140 Security ApplianceFirepower 4110 Security Appliance
Trying to ping the gateway on FTD from a DMZ vm on that network but unable to. Tried pinging from FTD to the vm IP and still nothing. I configured ICMP settings (under FMC > Platform settings > ICMP) to permit all ipv4 between the outside and DMZ zon...
Resolved! ASA 5516 firmware upgrade
Hi,I would like to ask about ASA 5516 firmware upgrade.i noticed cisco release 9.8.4 interim in 02 jun 2020.9.6.4 in 06 May 2020. 9.14.1 interim in 28 May 2020.So how to chose which one is stable and update release ?
hi,i configured an ASA FW for anyconnect RA VPN with two VPN policies/profile: a group policy (and a tunnel-group) for FULL TUNNEL and another for SPLIT TUNNEL.how do i "hardcode" to consistently display the FULL TUNNEL group/profile on the anyconnec...
I can deploy FTDv 6.2.3 fine on a ESXi 6.0 host, but anything after that, I get no prompt once the firewall boots, which mean I can't add it to a manager. I even tried FTDv 6.6. I can deploy 6.2.3 then add it to the manager, but if I upgrade the fire...
Resolved! FMCv Upgrade Failed From 6.2.3 to 6.4.0
Hi there folks! I've run into an issue with my FMC upgrade. Trying to go from 6.2.3 to 6.4.0 and It dies at 22%. I originally started the upgrade from the GUI but since it failed I only have CLI access now. I ran the upgrade_resume.sh as instructe...
Hi, very new to this and unfortunately in a position where I need to try and get some config working without having learned all the basics and core concepts yet. I'm using the ASDM for configuration. What I am trying to achieve - An internal IP addr...
Hello! Friends! I need advice.I have FirePOWER Appliance 7010. It very old version (5.4) I want to upgrade it for version 6.4So.1.How I understand the best way - restore from ISO and configure it. Is it right?2.What need I do with Firepower Managemen...
