Dears, I have a firewall with software source fire. license : ips + application + url filtering i blocked everything related to facebook , youtube , some vpn ,etc... and all is okey. There is an application ( PSIPHON) that users install it on their m...
Forum Posts
Hello everyone,I wanted to white list the range of ip addresses, a few blocks, some /25 and some /26.In security intelligence - network list and feeds I have white list list/feed where I add specific IP that I want to white list (download list, updat...
This topic is a chance to clarify your questions about the best practices and required elements to migrate your Cisco Adaptive Security Appliance (ASA) to Firepower Threat Defense (FTD). Because of the continuous evolution of cybersecurity threats, i...
Hello Folks, I am having an issue were I am unable to access the 10.10.50.0/24 network when I am behind the 192.168.1.0 network. I have built a NAT statement for when I am accessing the 192.168.1.0 from the 10.10.50.0/24. However, when I try and acc...
I want to restrict AD specific user in my policy. in detail I want to create policy for some user in AD specific group can we use few users select or we can creat group in ise from ad selected users???
ASA5506 We changed primary providers to AT&T fiber and made changes to the g1/1 interface and also have a failover service on g1/5 and now no inside systems can utilize Internet traffic going through the g1/1 interface but everything works fine using...
Hi. I have an FTDv (6.2.2.81) and an ASA 5515-x FTD (same version) in my lab. On FMC both devices stuck on "Deployment" phase and I cannot cancel it. I managed to stop the ASA FTD and restart the FMC and now it shows "Failed in Deployment" but cannot...
Hello, I am having problems nating from DMVPN HUb router to outside interface. Topology = (router -> outside switch -> ASA FW 9.x version) I have been following the document https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Sep2017/CVD-IWANDepl...
Hello, I face a problem with FTD version 6.4.0I have previously disabled TLS 1.3 and http2 due to some sites not working. Recently I tried to block youtube from a category of users, but it was not possible. I put an access policy rule to block it. ...
Hi Team I am planning to solution for SPlit Tunneling and which are the URLs are part of external domains should be resolve the ISP DNS and corporate domains should be tunnel via ASA secure DNS server, How to configure ?
Resolved! ASA failover happening daily
Hi all, I have 2 questions I hope you could help me with. We have a 2 nodes active/passive ASA setup (ASA 5525 running OS 9.9(2)), it used to run stable but now for some reason every night at the same time there is a failover happening. 1.It's always...
Resolved! MACsec switch-to-switch capture traffic
Hi,I am trying to capture encrypted traffic between two MACsec enabled switches (manual mode), I put the secured interfaces as a source but I can see clear test capture even though I can see that the links are secured.I am using 6504 switches with WS...
Resolved! Redundant GREoverIPSEC tunnels
i try to implement the following configuration:1. branch - CISCO891-PCI-K9, c890-universalk9-mz.157-3.M6.bin2. branch has 2 ISP uplinks3. HQ has 2 terminating gateways4. each branch by using 2 loopbacks create 4 tunnels for redundancy:tu1: Loopback1 ...
We have 2 ASA 5516 w/firepower setup in Active/Passive mode. Every 2 days or so the firewalls become inaccessible. We cant get to them internally, internet access is blocked and all incoming VPN traffic is blocked. If we reboot the firewalls they c...
Hi, We are planning to implement 2-factor authentication for administrators managing the firewalls. Can we authenticate the FMC administrator with 2-factor authentication. Couldn't find any documenation or configuration examples around it. Vaibhav
