The traffic flow is the following I have 2 servers (X.X.X.X) to destination to this url's:http://windowsupdate.microsoft.comhttp://*.windowsupdate.microsoft.comhttps://*.windowsupdate.microsoft.comhttp://*.update.microsoft.comhttps://*.update.microso...
Forum Posts
Has anyone taken the plunge and updated to 6.6.0 on their FTDs and use OSPF? We did ours a couple of days ago and ever since OSPF isn't updating its advertiements when new networks come online (such as RA VPN clients) or if we remove networks. They c...
Hi All, Well we have just migrated to FTD from Sophos UTM, and it, like all FW migrations was an interesting one! All in all, a successful migration and we are now humming along over the new system, happy campers so to speak. One question, our main i...
Hello Guys, I have a cisco 5508-X firewall and would like to create a userbased ACLs without installing Cisco AD agent in our AD or Domain controller servers. Appreciate if you can point me to the right direction. Thanks,Jack
Hi there,I have 1 active ASA 5512 firewall(5512-A) and also have 1 spare ASA 5512(5512-B) with no configuration.I'm wondering if I want to backup all configuration from 5512-A. what configuration should I backup? I only know i should backup startup-c...
Resolved! FTD interaction with FMC and CLI access
Hello, I'm using a 3rd party utility called OpManager to manage backups and monitoring of my network. I've been working with their support and I found out that my firewall's enable password in "system support diagnostic-cli" is blank. They don't supp...
Hey all,I currently have a Sonicwall Tz600 that is in place but looking to switch this out with an 1120 Cisco Firewall that is running in HA. I have gone through and configured the Cisco firewall, but before I roll it out to our production network, I...
Resolved! Reboot my ASA 5525
How do i restart me Cisco Firewall Asa ?
Resolved! ASA 5540 IP Blocking Question
I read up on this forum on how IPs should be blocked on our ASA 55xx firewall, and I added the following lines to the configuration: access-list outside_access_in extended deny ip host 65.xxx.xxx.0 anyaccess-list outside_access_in extended deny ip ho...
Hi, My weekly Network Risk Report from Firepower shows me the information below. How do I go about actually finding the 3 hosts running IE10 or 6 hosts running Firefox 35? Where do I click? I spent 20 minutes looking and cannot find this info.
Hello I have a cisco asa 5510 and would like to block a public subnet. Could some tell me how i can block a whole subnet with an access list. Thanks Jon
Hi All, My customer has procured Cisco Firepower 9300 with two SM-56. Now we need to deploy a Single Logical device in 9300 Chassis which can use both the SM module as customer has requirement of approx 100 Gbps throughput. I tried but not able to se...
Hi We are currently using FTD in Routed mode. FTD is being used for firewall purposes.Currently FTD is composed of high-availability . 1/ If the FMC faults and needs to be replaced, we would like to know the replacement process appropriate for the s...
Hey guys, I have ASA5525, FPR2110, and old 5515. On all of them, the SSL setting is:ssl server-version tlsv1.2ssl client-version tlsv1.2ssl cipher default fipsssl cipher tlsv1 fipsssl cipher tlsv1.1 fipsssl cipher tlsv1.2 fipsssl cipher dtlsv1 fipsss...
HI allI have 2 Wan links and FTD 1010 ND Mange it through FMC.i ask can i add two wan links to this device and use them in the outside zone?
