I'm a bit stumped with this, just standing up a new, (to me), 5508-x pair in HA. Managment interface is up and I can SSH / ASDM to it fine, I can ping the mgmt interface both from the same network and from a remote network with no issues - there is a...
Forum Posts
Good morning! After restore from Restore disk i have problems with configuration. (FP 6.1)My main problem - integration with Active Directory. (I have windows 2019 AD and I read about Supported Servers for Realms - 2012).1.So, where can see log on fi...
Hello there, What is the best procedure in order to migrate a Cisco 5525-X ASA with Firepower Services to a Cisco Firepower 21XX series ?I've heard of the Cisco Migration Tool, but from what I can understand this tool utilizes only conversion from AS...
Resolved! ASA ports 2000 and 5060 open to outside
Hi all A pen test shows us that several resources which are published to the Outside via an ASA-5545 (also with a Firepower device attached to the ASA as a module) replies on the ports tcp/2000 and tcp/5060, which is the Skinny and SIP protocol. Even...
Hello,We have a bit of an odd setup for accessing our ASA from ASDM. I will lay out the process: From our VDI instance, we open putty and ssh into a management server. After we are connected to the server over port 22, we then create a tunnel to one ...
hi,i managed to perform an FTD OS upgrade from 6.4 to 6.5 but noticed the initial config i did for 6.4 was gone and had to re-configure. i thought the configuration is persistent in flash memory. is there a prior step that i should've done prior to a...
Hi all, Does anyone know if basic IPS/IDS is included with a standard ASA OS and license installed on a Firepower 1000 series? As opposed to the SNORT system available if you install the FTD OS and licenses.Thanks!
All users are able to reach inside networks only. : Hardware: FPR-2110, 6589 MB RAM, CPU MIPS 1200 MHz, 1 CPU (6 cores):NGFW Version 6.6.1!hostname wdgngfwenable password ----- encryptedservice-module 0 keepalive-timeout 4service-module 0 keepalive-...
Resolved! ASAv with firepower services
Hello, we have Cisco virtual ASA deployed in Vmware ESXi, and it doesn`t support TLS 1.2 only support TLS 1.0. We need to upgrade it to new ASAv. So before ordering the new ASAv we want to also order firepower services for ASAv.Does someone know abou...
Has anyone had problems with viewing ASA settings using ASDM after full SSL inspection from a third party device was turned on? We have a Checkpoint NGFW that’s sole purpose is content filtering and ssl inspection. It sits on the inside of our netwo...
Resolved! object NAT with twice NAT functionality
Hi All, as per current setup we are using web server and object NAT has been configured, there is new requirement that new web server has been installed and clients need to be migrated from old server to new server one by one without changing the UR...
HIrecently migrated from ASA to FTD HA pair does anyone know why on the FMC I jusst see interfaces eth0 and eth1, we have eth1/1 and eth2/1 configured in a port-channel but dont see these any ideas would be appreciated. Thanks
Hello, Is it best/common practice to install a customized certificate for stealtwatch SMC or is it recommended to use the original self generated certificate? There isn't much documentation on this topic. I tried to use a CA cert in the lab and it ...
Hello, I have a 5510 and I'm trying to configure it, unfortunately Cisco thinks no one needs to use their firewall. So why am I trying to still use it? Well it's free and I'm using it as a project. A project thats been going on for years and really h...
Hi All, I am trying to add the cisco FTD as a log source in McAfee Enterprise Security Manager SIEM. However, I can only see the logs from the FMC. Does Cisco FTD support integration with McAfee SIEM? Regrads,Aniket Amdekar
