Hello together, I have 2x5525-X (in a Failover-Cluster config) and (first Version from 2015) with the old IPS Software Modul. I want to upgrade the 5525x Hardware with 2x5525-FP-UPG Pack, so that i can use the new Firepower Services. So anyone here, ...
Forum Posts
Hi experts,I would like any suggestions on this topology. We are is the middle of replacing our old ASA5520 with the new FirePower. Our current firewall terminate our IPsec tunnels and the GRE is terminated on the first inside router's loopback on th...
i have fmc+ftd 2110 and almost 100 rules . can i enable logging for all rules or will it cause cpu and storage issue for the fmc?
Dear All; I tried to block TOR browser by ASA 5515 FirePOWEP and FireSIGHT 5.3.1 using TOR application, And there's no results and no connections view as well. Please let me know if this issue has been solved with FirePOWEP and FireSIGHT 5.4.1 or 6 ...
Resolved! blocking users from using tor browser
Hello guys ,i bought a new cisco asa 5506-x with URL filtering license and i blocked some sites which is cool ,but now some users on the network are using tor browser to bypass the firewall and i can't do anything about it , so is there some way to b...
Hello , <164>Sep 03 2019 13:43:18: %ASA-4-106023: Deny tcp src Inside: x/3031 dst Outside:x/135 by access-group "Inside_access_in" [0x0, 0x0] <164>Sep 03 2019 13:43:18: %ASA-4-106023: Deny tcp src Inside: x/3031 dst Outside:x/135 by access-group "Ins...
Resolved! ASA 5506 9.82 BVI Maxium ips
Hi I have a ASA 5506 in transparent mode, I wanted to see if there is a maximum amount of interfaces I can add to a BVI on the 5506 using 9.8.2. Many Thanks in advance
Hi I am running the following sfr but when trying to update to 6.2.3.3-76 from the GUI it fails ModelASA5506Serial Number*****Software Version6.2.3 (build 83)OSCisco Fire Linux OS 6.2.3 (build13)Snort Version2.9.12 GRE (Build 327)Rule Update Versi...
Couldn't find this anywhere, so made it myself, its a group that excludes all RFC1918 addressing and contains all other IPv4 addresses. It includes RFC3330 but I don't think that will concern most people. object-group network INTERNETnetwork-object ...
Hi all,I'm trying to allow SIP calls through a 5505 running version 8.2(2). I've passed port 5060 through the firewall but now I'm seeing the RTP traffic blocked. I read this page and added this to my config:class-map inspection_defaultmatch defaul...
We are planning to deploy NGFWv in AWS for Secure access to Internet for Central Patch Mgmt Servers. Connection will only be initiated from AWS Servers to Internet. I am not able to find any design/deployment Guides for such scenario. My questions ar...
Hello Team,I have a question about Firepower local users. I see one local user admin but in document there is another local user called casuser. I was looking about casuser in Cisco website but no luck. Could you please help me about "casuser" in IP...
Hi,We have a schedule ASA (HA) 5585-X up-gradation scheduled for next week end. Current ASA version is 9.1(6)10, & we are planing to upgrade to 9.8(4) 10 version.Please let me know, if i can directly upgrade to 9.8(4)10 version from current 9.1(6)10,...
Hi,C:\Documents and Settings\Administrator>tracert fast.comTracing route to fast.com [23.50.182.181]over a maximum of 30 hops:1 <1 ms <1 ms <1 ms 10.0.10.12 <1 ms <1 ms <1 ms 172-16-10-253 112 ms 112 ms 112 ms 172.16.10.104 * * * Request timed out.5 ...
I have an ASA-SSM-20 module seems to be faulty on an ASA. I've been looking around the net and it looks like these modules usually come in 2 flavours - AIP-SSM-20 and CSC-SSM-20. The output from the ASA doesn't specifiy whether it is either of these....
