I noticed that Firepower is unable to have urls in the IPSec extended ACL - is there a way to send only specific sites through the VPN tunnel to another location? It looks like PBR may be needed, which is configured through FlexConfig. I don't think ...
Forum Posts
I have FTD 1010 and mange it using FMC.I want to add internal users to attach them to access policy to apply different web and app filter?and i dont have AD or LDAB server
Hi, I currently have an MPLS network to my HQ from the office and that is working fine.I am trying to provide SNMP access from HQ to office and everything is working fine except for 2 firewall ASA itself.HQ via MPLS <----> 10.2.5.4/24 ASA_1 10.18...
Resolved! Firepower 2140 Assistance
Dear community,I am new to the Firepower appliances and had some questions. Our organization has 4x 2140 Firepower appliances, however they are not currently operational in the network. We are still currently running off of ASA5545X. We would like to...
Hi. I am getting lots of syslog events that show the same source and destination IP. The IP belongs to one of the interfaces on the ASA. It is happening all the times and I just could not find out what's causing that. Fyi, my ASA model is 5516-x....
Resolved! Generate CSR on FMC for FTD
On the ASA, I could generate a keypair and CSR to then be submitted and signed by a CA etc.. For the FTD devices, can this be done from the FMC or do we need to use OPEN SSL? All I am looking to do is generate a keypair / CSR and get it signed et...
Resolved! Platform Settings on FTD 4110
Good Morning All, We recently deployed two FTDs 4110 and FMC 2500 and now it looks like we need to configure the Platform Settings in order to monitor, use the APIs, resolve the FQDNs...etc, on the FTD.My question is, since the firewall are in produc...
I'm looking for documentation pertaining to the configuration of Rapid Threat Containment within the FMC. It doesn't appear that Cisco has published a configuration guide. Please provide a link to the guide if there is one.
We have two ASA application (9.8) Active/Standby on two Firepower 4110. We detected a failed state on the Standby ASA. On the Active we are seen this message:Number of interfaces on Active and Standby are not consistent.If the problem persists, you s...
Hello for everybody. We need to block next file types:- Block all portable executable files (exe, cpl, dll, ocx, sys, scr, drv, efi, fon, pif, etc.);- Block additional file types that could be dangerous: .js files, rtf files, .scr files, .hlp files a...
Hi, We have two 4150 devices in a HA. For the past few days, we have been receiving warnings about high memory usage from FXOS from time to time. How can I troubleshoot this high CPU usage on FXOS. Is there a command to display the service etc. that ...
If I have say 4 ASAs running Firepower services with URL controlled by a single vFMC, would I need a URL subscription for each device ? Or subscription per device type ? Thanks
Hi everyone,i am trying to do "debug webvpn 255", but nothing showed on my logging buffered, and nothing on my SSH session (with terminal monitor). Here are my logging commands:logging enablelogging timestamplogging buffer-size 10000logging asdm-buff...
Resolved! IPS and VPN with Cisco FPR2100
Can IPS and SSL VPN work on Cisco FPR2130 at the same box, and which OS do i need to prefer between ASA,NGFW,NGIPS ?
Hello everyone, We have ASA FW 5500 with over 300 unused objects, these objects are network objects as FQDN and they dont exist in the network, hence, the FW doing DNS lookup for all of them, and our syslog server getting full with sys log msgs of t...
