We just purchase a couple 2140 NGFW's with Threat and Malware license subscriptions. I noticed there is a RA VPN license activation that is showing by default as disabled by user. Without buying additional licensing with the base license and Thr...
I have to configure Site to Site VPN on Cisco Firepower 4100 with FTDs .... does Site to Site VPN require any licensing ?Also, does multi instance FTD support Site to Site VPN ?
Hi, Need some advice please. I have 2x ASA5516-X firewalls running in active/standby HA and running eBGP with a service provider. The provider have two CPEs on site, connected via a common subnet with the outside interfaces of the firewalls. We ne...
HiI have FMC 750 connected to SFR on ASA 5555, I have some rules to filter internet usage in my network, one of these rules Blocking (whatsapp media messages).I removed it from the rule with saving and deploy it, but it still block it.Any solution??
Hi all ,I need you help please ,Briefly , I have two FMC 1000 ( HA ) and I have to upgrade them from current 6.2.2 to 6.2.3.I got the upgrade image from Cisco Website and I upload the package to Standby FMC System >> Update >> Upload >> ( I got the ...
Hi everyone, I couldn't find anything too definitive around whether or not FTD devices need access to internet and if so what specific URLs etc? Do they support proxy? I'm assuming that if we're using FMC to manage everything, licensing and other u...
Hi,how change nat rule position in ASA(9.1.2) without deleting it? I tried to reenter nat rule with new position but no success. Thanks in advance
Hello, I understand that in order to Integrate FTD with ISE we need to perform PXgrid integration and add Active directory as a realm, which works well. What about the users performing Dot 1x authentication using ISE local Database, How does FTD ...
Hello Everyone,I have a C881W and cannot communicate through port 987 from the public Internet. I have the following commands in my firewall and I can communicate on all other ports in this list.permit tcp any any eq 987permit tcp any any eq wwwpermi...
Hi, Just a question I am upgrading our ASA 5545-X from 9.1(1) to 9.8 but as checked with upgrade path I need to first upgrade the 9.1(1) to interim 9.1(2), however I can't find in cisco software downloads the 9.1(2) interim release. What should I do?...
Dear. My office existing running FrotiGate201E with SSL VPN, I will setup Cisco FPR1140 w/transparent mode for two tier firewall protect solution, I want to verity Froti SSL VPN traffic can pass to firepower transparent mode ? Many Thanks.
hello everyone, during weekend i upgraded fmc to 6.4.0.4 version and since that time i see something strane in data analyses. in URL category column there is no longer Travel, Shopping, etc but i see there numbers like 1284. what does that mean? it i...
Hello all, I was trying to upgrade to the latest Anyconnect version on the ASA pair. I successfully did that, to both of them but in the process, the Primary active FW became as Secondary active to make it back to Primary active I gave the command: "...
I am trying to figure out the best way to set this up on an ASA (9.6).We want 10.0.1.0 to go out ISP1 unless it fails, then choose ISP2.We want 10.0.2.0 to go out ISP2 unless it fails, then choose ISP1.(This is for simplicity there are several networ...
I configured the zone based firewall and the rules seem to work fine. However, the speeds are really bad. Even when just using pass actions it only reaches 1.5 Gbit/s (with the firewall turned off it reaches 9-10 Gbit/s).This even happens with very m...
