Network Security

Resolved! FTD management interface on FP2100

Hi, We need to setup an FMC on a different subnet than the FTD management interface so I will configure the gateway on this interface to reach the FMC. At the same time, the management interface will be connected to the same network than the producti...

Resolved! Restrict access to https/anyconnect based on IP

Im trying to restrict access through my ASA from several countries. When I test the ACL using my IP I lose ping ability and access to resources as I should. However I can still ping the outside interface and initiate an anyconnect connection. access-...

PAN Regex pattern recognition

Hi, Can we get feature on FTD2120 NGFWs for PAN Regex pattern recognition.This is what need to enable. Can this be done through IPS ????

Resolved! Permit before deny Cisco ASA

I am adding a ACL rule on ASA, but when I do that, it goes at the bottom after the deny statement, the only way I can move rules is using ASDM So, how can we do that using in cli when adding rules before deny statement- All the line number before 186...

FTD Remote Access VPN using AD

I was able to get this going after a few packet captures and figured out the issue.

Firepower URLs without license

I'm not sure if this is answered somewhere in the docs that I missed. If it it, I'm sorry. I have two questions in relation to my ASA5506-x appliance and firepower: 1. I don't currently have the URL license since I'm not interested in the cloud based...

Resolved! FMC how to turn off connection events for URL added to Global-Blacklist-for-URL

I added a few URL's to the Global-Blacklist-for-URL in FMC.Now I get too many connection events with reason "URL Block" Is there a setting turning off this type of event?

Resolved! FMC Question

Can I reboot my FMC at any time without affecting my FTD's? This would be in a production environment and I don't want to have any disruption of service, Internet, etc...... Thanks

Resolved! can cisco ASA acting as internal dns

Hi support, i Have my Cisco asa running with dhcp to distribute clients ip addresses. i have a mail server and to reach the mail server by name, i configure host on every pc (laboury) can asa acting as internal dns to resolve the name? Regards

Port forward between and Cisco ASA 5525-X and Cisco Meraki MX68W over L2L tunnel

Hi All, I need to create a port forward on our public IP on a Cisco ASA to antoher site which has a Cisco Meraki MX. I need to access a service behind the LAN on the Meraki side but from the public IP of the ASA. There is a vpn tunnel between us and ...

fmc giving error when downloading AD users?

i have fmc 6.4 and ftd 2110 fmc was downloading users fine for couple of weeks untill i started getting this error whenever i try to download users from the AD "Unable to download users/groups unable to fetch user attributes for the follwoing users:j...

Firewall policy

I am trying to have an external user (outside the perimeter of my network) that needs to access a server in the data center. Would I need to create 2 policies for this? One fw policy when it comes into the border firewall and another at the data cent...

FMC-Cloud Server

Now that Cisco has owned Meraki for a few years, is there any potential for the FirePower Management to be cloud-based? More modern offices are not connecting together now that most applications are cloud-based or in AWS, for example. However, we do ...

Email notifications for a hit ACL

Can I have FMC to drop an email every time one particular ACL is hit? I know I can generate a SNMP trap or a syslog event, but is email notification an option somehow?