Hello together, does anyone know if it is possible to negate an object or network in the policies? Unfortunately I have not found anything for this.I wanted to create a rule for Internet Access (allow any to "not RFC1918" http and https) just as an e...
Forum Posts
We have a user that uses this app for texting and every time he sends a text, we get a notification from FMC, see below: [1:47567:2] "MALWARE-CNC Win.Trojan.Zegost variant outbound connection" [Impact: Vulnerable] From "NGFW1-ATT" at Mon Mar 2 15:42...
Hi. I am planning to setup 2 factor authentication for anyconnect clients, anyconnect vpn has already setup and working with Radius(NPS serverwith AD). i have taken subscription from Azure MFA oncloud and want to deploy second authentication using az...
I have over 50 firewalls protecting several network. I am trying to find the best way to keep up with all the devices on the network (servers, printers, thermostats, etc)
I am trying to enable active/standby failover which I have done on another pair of Cisco ASAs. But when I attempt to configure it on this specific pair I get the following output. %ASA-1-105002: (Primary) Enabling failover.Mate's operating mode (appl...
I made a bash script to automatically fill an object group on an ASA related to Office365 IPs. The script itself get's the IPs, changes the correct syntax and leaves a text file called outfile.txt which looks something like enable enpass conf t obje...
Hello guysHave you come across an issue where a ASA is blocking access to an CDN.I have problem when PCs connect to t.clicktale.net. contentsquare.com via a cookie it does not work.If we run the cookie off the network it works fine. The Vendor is ...
Hello Experts, Having a bit of a problem trying to use ASDM to manage ASA5525 with FirePOWER installed. Now I now that Cisco Bug ID CSCuw54048 fixed this with a release of SFR 6.1.0 version but I'm still getting the same error when I try to login to ...
Does ISE subscriptions need SMARTnet (ECMU)
Hi all, I'm trying to get our new FP2110 into production and even the simplest of tasks seem to be a struggle in FDM. (we don't have FMC) I've setup a test server sat on a dev environment, it's running librespeed. This server can ping outside, so the...
Hi All, We would to like use Cisco PSS Smart APIs (not support APIs) which can provide us information like Field Notices, Security Advisories.However not able to find actual endpoints to see how many APIs available. Please help Regards,Ajitkumar Tan...
I have been receiving an error when switches that I have are not online. I use a local account to login and when I try to get into enable mode, I get % error in the authentication. aaa authentication attempts login 5aaa authentication login default ...
New ASA 5506 trying to get the default config up and running. When using Window 10 box I get ASDM was unable to load the firewall's config... When using Window's 7 ASDM gets stuck at 17%. Modem connected to Gig1/1, Gig1/2 connected to switch, GE MGMT...
I have been reading this PDF about Type 6 encryption on IOS devices: https://www.cisco.com/c/en/us/td/docs/ios/sec_secure_connectivity/configuration/guide/convert/sec_ike_for_ipsec_vpns_15_1_book/sec_encrypt_preshare.pdf But if I configure my devices...
Hello all, I have to set up a prod environment in a datacenter. The goal is to place two data encryption machines which will be load balanced behind two ASA machine, each of them connectiong an outside line. I have the crypto machines and the ASAs bu...
