Trying to ping the gateway on FTD from a DMZ vm on that network but unable to. Tried pinging from FTD to the vm IP and still nothing. I configured ICMP settings (under FMC > Platform settings > ICMP) to permit all ipv4 between the outside and DMZ zon...
Forum Posts
Resolved! ASA 5516 firmware upgrade
Hi,I would like to ask about ASA 5516 firmware upgrade.i noticed cisco release 9.8.4 interim in 02 jun 2020.9.6.4 in 06 May 2020. 9.14.1 interim in 28 May 2020.So how to chose which one is stable and update release ?
hi,i configured an ASA FW for anyconnect RA VPN with two VPN policies/profile: a group policy (and a tunnel-group) for FULL TUNNEL and another for SPLIT TUNNEL.how do i "hardcode" to consistently display the FULL TUNNEL group/profile on the anyconnec...
Hi I am making a script which requires me to call multiple devices through API. I wanted to know that what is the maximum number of API calls that can be made for Cisco Firepower Management Centre at a single time.
I can deploy FTDv 6.2.3 fine on a ESXi 6.0 host, but anything after that, I get no prompt once the firewall boots, which mean I can't add it to a manager. I even tried FTDv 6.6. I can deploy 6.2.3 then add it to the manager, but if I upgrade the fire...
Resolved! FMCv Upgrade Failed From 6.2.3 to 6.4.0
Hi there folks! I've run into an issue with my FMC upgrade. Trying to go from 6.2.3 to 6.4.0 and It dies at 22%. I originally started the upgrade from the GUI but since it failed I only have CLI access now. I ran the upgrade_resume.sh as instructe...
Hi, very new to this and unfortunately in a position where I need to try and get some config working without having learned all the basics and core concepts yet. I'm using the ASDM for configuration. What I am trying to achieve - An internal IP addr...
Hello all--I'm trying to configure an ASA transparent mode service insertion into an ACI fabric using PBR. I believe I have all of the config on the ACI side done correctly. That is, I have no faults on the tenant and when I go into the inventory, ...
Hello! Friends! I need advice.I have FirePOWER Appliance 7010. It very old version (5.4) I want to upgrade it for version 6.4So.1.How I understand the best way - restore from ISO and configure it. Is it right?2.What need I do with Firepower Managemen...
Resolved! Visco Stencils for NGFW 1000 Series
Hi is there any aware if there is a visio stencils for ngfw 1000 series thanks at advanced
Resolved! ASA Context Failover Alerting
Hi, I am just wondering if it is possible to monitor the failover of an ASA in multiple context mode, and even more finely tune that monitoring to include specific contexts failing over to a standby ASA? I am thinking syslog is probably the most like...
I'm trying to tftp files from a ASA 5506 (dynamic side) via a dynamic-to-static IKEv1/IPsec tunnel to a 5515X ASA (static side) to back up the running config or send an updated version. Tunnel is up and I have full reach-ability to all the networks a...
Hi, Say an ACP rule allows a LAN IP from inside to out and has inspection turned on. Does Snort only inspect the outgoing packets or does it also inspect the return established traffic? Thanks.
hi Marvin/team, I will be implementing an AMP4E solution for the centos server.I need to know what kind of prerequisites from the customer end.is there any kind of port that needs to be open on the running Firewall?can you provide a stepwise document...
Hi, I have a WS-C3650-48PS IOS 03.07.04E cat3k_caa-universalk9. The following appears in a network security report: The host transmits UDP packets with a constant IP Identification field. This behavior may be exploited to discover the operating syste...
