I have problem with access to FMC using admin account, because accidentally disable Role administrator on external authentication tab, and now i can't access the gui on FMC, but i still can access the cli using adminanyone here know how to enable adm...
Good afternoon guys. Struggling with a new ASA5525/SFR/FMC deployment. Everything is able to ping each other. I've imaged the SFR with 6.4.0 and that completed just fine. I have deployed the FMC and it is able to communicate with the SFR without any ...
Hello, How to export All the rules in a FirePower Policy. Reason I am asking this question is searching items in SourceFire is not that much user friendly. Like If I want to search with a AD Group name it really does not look at User field. That's ...
I did the CSR request via command line and sent it to Godaddy. I got the SSL cert back and I imported it via the command line. I opened the crt in notepad and copied it in the command line. If I do sh crypto ca certificate cert_vpn I see 2. The ne...
Have several PIX 515's. I can cfg a l2l VPN between 2 of them (or ns5gt's) w/o a problem. To test NAT-T I have 3 PIX's in-line. PIX1-PIX2-PIX3. Traffic is generated from a PC hung off PIX1 to a PC hanging off PIX3. All is fine but NAT-T doesn't seem ...
Hi, I have a failover cluster FTD device on an FMC.I would please like to know if interface monitoring needs to be “checked” under the Device Settings of each FW on the FMC, for interface message IDs such as; 101002, 104002, 105032 to be triggered, b...
Hi is it possible to HA between ASA 5505 and ASA 5506-X Firewalls running same OS version . BR
I am trying to establish a base policy on a FirePOWER deployment. I want to introduce ANTI-Spoofing of RFC1918 addresses and all other reserved IP addresses to block anything at the Firewall with such addresses in the source. I understand that revers...
Hi,I recently upgraded Cisco ASA 5505 firewall to its latest version 9.2.4 from 8.2 but after upgrade Cisco ASDM is unable to read asa image. Can you please let me know the issue and how it can be resolved. Thanks & kind regards, Muhammad Hamid Ashra...
My manager went to a conference. She came back asking about replacing the routers in our WAN with firewalls. My knee-jerk response was no way, but we are migrating to an ethernet based WAN - so maybe? Any thoughts?
Hi Guys,Do you know if Cisco Firewall behavior is based on RFC?In addition, what is the difference between old 8.2 to 9.x in terms of the packet flow from ingress to egress?Thanks
Hi,What is the difference between "Firepower Threat Defense-Firepower NGIPS-Firepower Services on ASA" ? ASA Mid-Range (5512/15/25/45/55) does not support firepower NGIPS ?. Does it mean it does not sNG features ? Thanks
Hi,I currently have a vlan setup as below on a ASA5516, other ports are unconnected, this is connected to a Cat3650 switch with the vlans setup.interface GigabitEthernet1/2no nameifno security-levelno ip address!interface GigabitEthernet1/2.10vlan 10...
Hi- I added a new access list statement, but it went after deny. The only way I had to move was using ASDM software. How can add an acl line before deny in acl? e-gremark test access-list inside_in line 7 extended permit tcp host 1.1.1.1 host 2.2.2.2...
FTD and OSPF MD5 authenticationHi all,I am trying to get OSPF authentication working between router 4451 interface and FTD 550x-X with FTD image, managed by FMC. Connectivity works and also OSPF adjacency is up, without authentication is used. So it'...
