So I'm new to FMC and I'm trying to get a grip on how things work. I have an intrusion alert that keeps coming up. "HI_CLIENT_DOUBLE_DECODE (119:2:1)"Problem is, it keeps alerting on non-malicious traffic (all internal traffic). How do I turn off thi...
Hi We have a router C2921. When tenable scan vulnerability, we got the following info. Not sure if its vpn configuration issue. Anyone can provide suggestions to resolve it? Thank you of a VPN gateway and gain unauthorized access to private networks....
We recently updated FMC and our FTD's to code 7.x. Are we able to build rules using MAC addresses yet?
Hi community,Is it possible to force FTD virtual that's managed over FMC be in evaluation mode or consume evaluation license from CSSM On-prem while other FTDs managed over FMC are running and consuming threat / url / malware licenses already? Thank...
We had a Cisco ASAV Standard Package virtual appliance installed in our AWS environment and there does not seem to be any available way to obtain the latest software OS to update the OS/firmware. It requires you to have access via Cisco.com to downl...
How can I upgrade the firmware version of an ASAv running in AWS? I don't want to rebuild a new instance from scratch. So, is there a way to proceed with a simple upgrade CURRENT RUNNING VERSION = 9.6.2.1AWS AMI LATEST VERSION = 9.9.1.2 We have a...
Hi,I have two separate local network (old and new) and I put Cisco Asa between them. "New" network is inside network and "Old" network is outside network and I allow access for all subnet from new to old.Now, I want allow access from one host from ou...
Newbie question, please help.access-list OUTSIDE extended permit tcp any host 10.1.1.5 eq www This command will allow outside host to access internal host with the corresponding ip using the port 80, is that correct? Thanks in advance.
Hi all,I have a 4321 router that functions as a ZFW. I have configured zonesGi0/0/1 --> insideGi0/0/0.1 --> TEST. The TEST zone has dhcp relay commands configured, but I cannot get any end device behind the TEST zone get an IP address via our DHCP se...
Is it possible for me to set up two-step verification for my Cisco RV325 router?
Is best practice still to either tag nothing or tag everything on an interface on the ASA? As in, either leave it as an untagged and then pick the appropriate vlan on the downstream switch: GigabitEthernet0/2nameif insidesecurity-level 100ip address...
Dear sir, I need to upgrade openssh on cisco fire linux os, because founded vulnerability.but yum update, apt-get command is not heard.please inform me that how to upgrade openssh. My fmc os and openssh version as below. thanks,
Software Version 5.4.1.6 (build 40)OS Sourcefire Linux OS 5.4.0 (build126) Hello! I have a problem! I hope for your help! When a try to apply settings to Sensor in FireSight - i have error - "Unable to connect to DB". FireSight and FirePower see e...
adding route into the asa
Have private IP address on FTD Management.. NAT is though a Cisco 5510. The FTD is managed fine, but when trying to upgrade, the readiness check fails with Status Log:Readiness Check To 192.168.77.112 Failure, Got ExceptionTCPdump and 5510 log sho...
.jpg "VIP Expert"){kind=icon}
