On the ASA, I could generate a keypair and CSR to then be submitted and signed by a CA etc.. For the FTD devices, can this be done from the FMC or do we need to use OPEN SSL? All I am looking to do is generate a keypair / CSR and get it signed et...
Good Morning All, We recently deployed two FTDs 4110 and FMC 2500 and now it looks like we need to configure the Platform Settings in order to monitor, use the APIs, resolve the FQDNs...etc, on the FTD.My question is, since the firewall are in produc...
I'm looking for documentation pertaining to the configuration of Rapid Threat Containment within the FMC. It doesn't appear that Cisco has published a configuration guide. Please provide a link to the guide if there is one.
We have two ASA application (9.8) Active/Standby on two Firepower 4110. We detected a failed state on the Standby ASA. On the Active we are seen this message:Number of interfaces on Active and Standby are not consistent.If the problem persists, you s...
Hello for everybody. We need to block next file types:- Block all portable executable files (exe, cpl, dll, ocx, sys, scr, drv, efi, fon, pif, etc.);- Block additional file types that could be dangerous: .js files, rtf files, .scr files, .hlp files a...
Hi, We have two 4150 devices in a HA. For the past few days, we have been receiving warnings about high memory usage from FXOS from time to time. How can I troubleshoot this high CPU usage on FXOS. Is there a command to display the service etc. that ...
If I have say 4 ASAs running Firepower services with URL controlled by a single vFMC, would I need a URL subscription for each device ? Or subscription per device type ? Thanks
Hi everyone,i am trying to do "debug webvpn 255", but nothing showed on my logging buffered, and nothing on my SSH session (with terminal monitor). Here are my logging commands:logging enablelogging timestamplogging buffer-size 10000logging asdm-buff...
Can IPS and SSL VPN work on Cisco FPR2130 at the same box, and which OS do i need to prefer between ASA,NGFW,NGIPS ?
Hello everyone, We have ASA FW 5500 with over 300 unused objects, these objects are network objects as FQDN and they dont exist in the network, hence, the FW doing DNS lookup for all of them, and our syslog server getting full with sys log msgs of t...
Team, does Cisco ISA 3000 security appliance support Active/ Active or Active/standby failover ? regards,Akshatha
Hi,we are getting an error CSP reached max-app-limit -Install Rejected when installing standalone ASA in FTD.logical-device ASA installation was worked before, whereas, for practice, the team had tried to delete and install for a few times. After th...
Hello. I have a query about Cisco ISE (as AAA server) to Azure AD SAML for MFA. When we add a Network device in Cisco ACS/ISE for we use Tacacs/Tacacs+ or RADIUS. The Cisco ACS/ISE will then use the RADIUS protocol to communicate Corporate NPS server...
Hello, i have to following problem.Connected via anyconnect (vpn ip address 10.10.10.239) , i am not able to connect to 10.10.11.10 which is on interface bvi2ASA# sh versionCisco Adaptive Security Appliance Software Version 9.8(1)Firepower Extensible...
Greetings all. I got a Cisco ASA 5585X in context mode. With 15 Contexts (12 in Routed mode and 3 in Transparent mode) And i need to assigned all of them a management IP. Currently i´m using Management0/0 for alle routed mode Contexts. (one /24 net...
