I have 2 new NGFW 4115s with the latest software. From the documentation, it seems you should be able to create multiple cluster container instances on these. But creating a cluster instance only allows a native instance and consumes all CPUs. I can ...
Forum Posts
Resolved! ACL Support on FTD1120 Using FDM
I am trying to configure a FTD1120 and am having trouble with the access list commands. We're not able to configure a management VM, so we're using the 1120's onboard Device Manager. Right now we're just trying to get access out to the Internet and p...
Is it possible for Firepower to detect data loss via dns tunnels? Such as what infoblocks can do? Thanks in advance
Hi, Just setting up a new 2100 but unlike the 4100 the default management address opens up the FDM and not the Chassis manager. even though I have data interfaces connected and enabled the interface on the GUI it's still in amber color in the GUI...
Hi all, I'm pretty green with the Firepower line, but have a decent amount of experience with the ASA/PIX lineup (Plus CheckPoint & PA). I'm having a bit of difficulty getting SNMP working on a HA pair of 2110 I'm commissioning. I have basic connecti...
Resolved! Reach public IP on 2nd WAN interface
Hello,I have a question about a cisco asa 5525X where I'm using two WAN Interfaces (WAN-1 with ip 111.111.111.111 and WAN-2 with IP 222.222.222.222) with policy based routing with route-maps.VLAN 45 is going out over WAN-1 but the clients in this vla...
dear allI configured TID on my firepower and installed approximately 29,000 observables. In order to test it I changed status of one of the observables from Monitor to block. Then I entered malicious site (taken from observables) but firepower didn't...
Hi there! We have HQ with with 4 branches, there're ASA HA (Active/Standby) in every location, and HQ and 3 branches are connected via MPLS and only one branch connected to HQ via site-to-site VPN. We're planning to upgrade ASA firmware to 9.12.As I ...
Hi, I am trying to allow a few MAC addresses access to the Internet via an ISR router. Cisco IOS XE Software, Version 16.09.04Cisco IOS Software [Fuji], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.9.4, RELEASE SOFTWARE (fc2) I am tryin...
Resolved! Firepower Licenses - NGFWv
Hello Community,I have recently built two firepower as HA and now i would like to apply the Firepower Threat Defense Base Features through the FMC, when i built the FTDs i applied the evaluation licenses for th 90 days because the original licenses o...
Resolved! ASA 5508 and 5516 with Firepower module
Hi, I am new to Firepower. We have FMC and I have added both firewalls to it. From what I can see, I can only configure certain things using the Firepower module, the interface IP's etc, I had to configure on the ASA part of the firewall. My question...
Hello All, Just looking to confirm the ASA appliance upgrade (zero downtime) can be done in the same way as before when running on Firepower 2130 chassis (ASA appliance running on FTD 2130) e.g. Load files to flash / Disk0 using ASDM (or copy via FT...
how to configure MAC-IP address reservation in ASA 5515. Under DHCP server, not getting any options.
how to configure MAC-IP address reservation in ASA 5515. Under DHCP server, not getting any options.
Hello,One of my customers has asked to block all external VPNs to avoid internal users connecting to these external VPNs and bypassing FWs defenses. How could I block this if users are trying to connect to Remote Access VPNs using SSL? Is there any w...
Hello Expert, I am associate Security Engineer and my work is verificating mainly platform and network. I must detect the "Bleichenbacher Attack on TLS Affecting Cisco Products", and I got a Cisco ASA 5505 v8.0.And then I already installed detection ...
