Hello for everybody. Can someone tell me please - is there policy-based routing in firepower 1140? This device is managed via the FMC 6.4.0 version. https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v6...
Forum Posts
Hi, I have a few ASA's with FirePOWER modules. The FirePOWER modules are being managed by FMC and each has a Protection, Control, URL Filtering & Malware license allocated to it. If I were to re-image the ASA to the FTD image, how does the licensing ...
Hello, I am using Cisco ASA5525 firewalsl in active standby mode. It is running on version 9.9. I want to upgrade it to 9.12 version.I have copied the image file to active unit using scp. however when i try to copy the file to standby unit, it gives ...
Resolved! FMC and AD integration
Hi Experts, We've ASA with sourcefire (6.4) running and in the network I manage, I see no AD agent configured (System->Integration) but I do see usernames under user activity.There is no realms or the identity policies configured. Under the user act...
Cisco Catalyst 3750 Series not showing ip addressSwitch#sh running-configBuilding configuration...Current configuration : 2247 bytes!version 12.2no service padservice timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hos...
I do quite a few ASA to FTD migrations and many customers want a "Big Bang" approach. I am familiar with all the Migration tools that Cisco offer but they do have their limitations. The limitation for me is that I have a customer who has 200 static r...
Hello,we have running asa 5525-X with firepower module. I have enable Portscan detection in IPS rule and I can see portscans from internal hosts to ip adresses in the wwwBut when I do a portscan from a host in the internet to a extenal ip on the outs...
Hi All,It's been a long time since I worked worked with the ASAs but having to replace a 5520 with a 5515. The customer current ASA is running version 9.1.(7)23 and the ASA 5515 doesn't support 9.1.7. and asdm 7.1.5From what I can see there is not a ...
I hvae a new FMC 6.6 VM and 2 new 4115 NGFWs. In determining whether to use high availability for FMC, what is the effect of a failed single instance FMC? The 6.6 FMC documentation only mentions you lose event data if you only have one FMC and it fai...
Hi All,Hoping to get some help, and possible advice.We have a ASA5585, running on our corporate network. As is the case with many organizations, we have a growing number of staff working from home. We have been experiencing dropout connections to our...
Hi everyone, I am trying to configure alarm for failover via SNMP, but cannot find the appropiate OID with which I can do this.I have similar configured for ASA-5525 with OID 1.3.6.1.4.1.9.9.147.1.2.1.1.1 and is working.But on the FTD I don't find th...
Hello,I currently have the following versions in my Firewall: ASA: 9.5(3)ASDM: 7.7(1)FirePOWER: 6.2.0-362 I need to upgrade the ASA version to 9.8(4) but I am having issues to understand if I need to upgrade anything else. If I check the ASA and Fire...
Resolved! Export - FirePOWER Policies
Hi, Can we export policies from FMC in pdf or csv format for audit purpose.I can export it in sfo format only.
Hi, I am enabling IPS poly with "Balance Security and Connectivity" in our production environment. This IPS enabling is not going to break anything in production environment right and will only generate intrusion events. Even it sees a malicious traf...
