Hope everyone's well! Could someone advise on this please? We're looking at installing Firepower devices, with ISE-PIC to provide SSO information based on Active Directory users. We need to control and log web access to URLs based on AD username. Fr...
Forum Posts
I could be wrong but I thought if I set the Intrusion policy within a particular Allow Access Control Rule as None, the FTD/Lina would not send traffic to snort for verdict...But if I do a packet tracer, it seems like FTD still send traffic to Snort....
I'm wondering if it is possible to block requests to a specific URL hosted behind our Netscaler ADC using FMC and IPS 2100. I have a general Geolocation access policy within FMC applied to our edge IPS devices, but was wondering if it is possible to...
Hi We use a Firemon management tool that needs to communicate with different ASAs on the company. We have no problem with most firewalls, but for one of them, Firemon is not able to collect its configuration. Firemon support told us that the tool co...
I have firepower 2110 firewall & it is running with FTD IOS & managed locally FDM. I would like to configure SNMP to monitor Firewall in Network monitoring system but I could find any option in firepower 2110 in FDM to configure SNMP featur...
I'm a bit stumped with this, just standing up a new, (to me), 5508-x pair in HA. Managment interface is up and I can SSH / ASDM to it fine, I can ping the mgmt interface both from the same network and from a remote network with no issues - there is a...
Good morning! After restore from Restore disk i have problems with configuration. (FP 6.1)My main problem - integration with Active Directory. (I have windows 2019 AD and I read about Supported Servers for Realms - 2012).1.So, where can see log on fi...
Hello there, What is the best procedure in order to migrate a Cisco 5525-X ASA with Firepower Services to a Cisco Firepower 21XX series ?I've heard of the Cisco Migration Tool, but from what I can understand this tool utilizes only conversion from AS...
Resolved! ASA ports 2000 and 5060 open to outside
Hi all A pen test shows us that several resources which are published to the Outside via an ASA-5545 (also with a Firepower device attached to the ASA as a module) replies on the ports tcp/2000 and tcp/5060, which is the Skinny and SIP protocol. Even...
Hello,We have a bit of an odd setup for accessing our ASA from ASDM. I will lay out the process: From our VDI instance, we open putty and ssh into a management server. After we are connected to the server over port 22, we then create a tunnel to one ...
hi,i managed to perform an FTD OS upgrade from 6.4 to 6.5 but noticed the initial config i did for 6.4 was gone and had to re-configure. i thought the configuration is persistent in flash memory. is there a prior step that i should've done prior to a...
Hi all, Does anyone know if basic IPS/IDS is included with a standard ASA OS and license installed on a Firepower 1000 series? As opposed to the SNORT system available if you install the FTD OS and licenses.Thanks!
All users are able to reach inside networks only. : Hardware: FPR-2110, 6589 MB RAM, CPU MIPS 1200 MHz, 1 CPU (6 cores):NGFW Version 6.6.1!hostname wdgngfwenable password ----- encryptedservice-module 0 keepalive-timeout 4service-module 0 keepalive-...
Resolved! ASAv with firepower services
Hello, we have Cisco virtual ASA deployed in Vmware ESXi, and it doesn`t support TLS 1.2 only support TLS 1.0. We need to upgrade it to new ASAv. So before ordering the new ASAv we want to also order firepower services for ASAv.Does someone know abou...
Has anyone had problems with viewing ASA settings using ASDM after full SSL inspection from a third party device was turned on? We have a Checkpoint NGFW that’s sole purpose is content filtering and ssl inspection. It sits on the inside of our netwo...
