Hi, I have enabled default IPS Policy "Balanced Security and Connectivity" on FMC. Now wana setup automatic email alerting in case any Intrusion events. I can send email to my self when test it but not getting any events. Am I missing anything here.
Forum Posts
Does Cisco ISE work simultaneously with AD and Radius server?
Hi , I am enabling default IPS policy "Balance security and connectivity" for 1500 rules. Since I needs to attach it with every access control policy so its gona take too much time. Can we do in one shot to enable IPS under all access control polices...
Hi,I cannot see informational logs ,even if choose debugging under real time logging in monitor tab current logging section is below . logging enablelogging timestamplogging trap informationallogging history criticallogging asdm errors , Is i...
Resolved! How to confirm that certain CVE# is included in specific SRU for IPS (1500 FMC and 8250 Sensors)?
We have many CVE numbers and we need to make sure that our IPS is aware of them and we are protected against them. Whenever we search by the CVE# from the FMC GUI, it shows nothing as the CVE# is included explicitly in the details not the main info. ...
Hello for everybody. Can someone tell me please - is there policy-based routing in firepower 1140? This device is managed via the FMC 6.4.0 version. https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v6...
Hi, I have a few ASA's with FirePOWER modules. The FirePOWER modules are being managed by FMC and each has a Protection, Control, URL Filtering & Malware license allocated to it. If I were to re-image the ASA to the FTD image, how does the licensing ...
Hello, I am using Cisco ASA5525 firewalsl in active standby mode. It is running on version 9.9. I want to upgrade it to 9.12 version.I have copied the image file to active unit using scp. however when i try to copy the file to standby unit, it gives ...
Resolved! FMC and AD integration
Hi Experts, We've ASA with sourcefire (6.4) running and in the network I manage, I see no AD agent configured (System->Integration) but I do see usernames under user activity.There is no realms or the identity policies configured. Under the user act...
Cisco Catalyst 3750 Series not showing ip addressSwitch#sh running-configBuilding configuration...Current configuration : 2247 bytes!version 12.2no service padservice timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hos...
I do quite a few ASA to FTD migrations and many customers want a "Big Bang" approach. I am familiar with all the Migration tools that Cisco offer but they do have their limitations. The limitation for me is that I have a customer who has 200 static r...
Hello,we have running asa 5525-X with firepower module. I have enable Portscan detection in IPS rule and I can see portscans from internal hosts to ip adresses in the wwwBut when I do a portscan from a host in the internet to a extenal ip on the outs...
Hi All,It's been a long time since I worked worked with the ASAs but having to replace a 5520 with a 5515. The customer current ASA is running version 9.1.(7)23 and the ASA 5515 doesn't support 9.1.7. and asdm 7.1.5From what I can see there is not a ...
I hvae a new FMC 6.6 VM and 2 new 4115 NGFWs. In determining whether to use high availability for FMC, what is the effect of a failed single instance FMC? The 6.6 FMC documentation only mentions you lose event data if you only have one FMC and it fai...
