Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...
Forum Posts
Resolved! FMC Patch 6.4.0.2 to 6.4.0.7
Forgive me if this is a silly question. I haven't worked with ASAs or Firepower before.I am looking to patch my Firepower Management Center from 6.4.0.2 to 6.4.0.7 due to the security advisory: cisco-sa-20200122-fmc-auth From what I have read, since ...
Hi, i have some strange behavior with my Cisco Asa, seems nobody have - so maybe a configuration issue from my side? Upgraded the new IOS and ASDM recently but have this issue also at earlier versions:- Cisco Adaptive Security Appliance Software Vers...
Hi everyone 1. When apex/plus anyconnect licenses are added, should I install activation-key again or not?2. After purchasing 50 licenses if i purchases 25 licenses again in 3months, is it correct that 75 licenses are available during 9 months? tha...
Hellof for everybody. Is it possible to install two fp 1140 in HA without FMC? If i understood correctly, its possible only through FMC. And the next question. If im going to imlement this scheme, should i make settings for each port, or i can do it ...
Resolved! SSL encryption change ASA single context
Hello everyone,I am facing the issue with being unable to open asdm for one asa appliance (ASA5512). I assume that the issue is caused by the ssl encryption currently set as des-sha1.I would like to get it changed to ssl encryption aes256-sha1. My qu...
For RA-VPN users I would like to authenticate them through a RADIUS-server->Active Directory chain.This works fine as long as I use a VPN-pool for IP addresses. However, due to the fine grained FW rules, each user needs to be assigned a specific IP a...
Hi guys,We have an issue with one of the node in our ASA cluster - basically module is in Unresponsive state.From what I can see there is probably issue with memory - I am suspecting one of the memory module but would like to know if someone have exp...
Hello, I have ASA with SFR module managed by FMC. I have a problem with windows update. I have a new pc and I try to update it, but it fails, when the traffic passes through the SFR.When I disable the SFR the updates are successful. It hits the righ...
Resolved! ASA SSH inspection
Hello, I am trying to understand how inspection works on the ASA and although Cisco documentation on the subject is very analytical, after some testing on a 5520, a few questions have come up. The Lab setup is the following:PC -> (inside)ASA(outside)...
Hello, We upgraded our 5505 to a 5506 with FirePower to take advantage of the increased bandwidth and the FirePower Services for security. Previously we had extensive object groups for access and denial and we wanted to transition to the FirePow...
Resolved! virtual FTDs
Hello all, i have recently installed two virtual FTDs as Active and Standby but now i receive this error.Interface 'GigabitEthernet0/3' is not receiving any packets Is there anyway i can solve this issue and what is causing this issue please.Thank yo...
Has anyone noticed the high degree of "Background Intelligent Transfer Service (BITS)" traffic is coming through their FWs? I've read up on what it is and wondered why so much traffic is hitting the FW and what is being transferred. I came in this ...
Hi Sir: What event will trigger any session to log the Reason type of "Intrusion Monitor". The Firepower just think the session is not really hight critical and it will not compromise our client. So it will log of Intrusion Monitor , Right ? Or it...
Hi Pros The biggest problem now is with the ASA firewall we have no idea on how to configure them to achieve a connected network. Our ping test from Router and Users fail to reach the DMZ interface. I assume that we have to configure static routes an...
