I've noticed that the latest suggested release of Firepower services (6.4.0.4) is only compatible with the larger 5508 and 5516-x firewalls. I have an environment with 2 5516-x, 2 5508-x and about 15 5506-x firewalls.I can't find a recommended "road...
Forum Posts
Hello, I purchased a Cisco 2130 series firewall past 6.2.3 to at least 6.3 or 6.5. However, I am unable to find any documentation on upgrading the 2100 series firewalls without using FMC. I will only be managing it with the FDM. Is it possible to upg...
I have an ASA 5515X with two Providers and would like to be fault tolerant and pseudo load balance. I have bound my crypto maps to both outside interfaces and my remote sites (35) have both ISP's ip's of the ASA and can connect to either.... but not ...
Resolved! Bootvar and boot command
Hi all, I have recently upgrade our Failover Active/Standby ASA software. Everything works flawlessly. Except I have the following question regarding the boot and bootAfter the upgrade, both devices come with the new IOS image. However, when I issu...
Hey All,I'm running an ASA 5550 out of my home network and, overall, things are pretty good. It acts as my gateway (ISP Gateway is in full passthrough mode, all frames get sent to the ASA), and does it's job well.I recently installed a 5508 WLC with ...
I think NAT is REJECT on the ASA.Can anyone tell me why?I'm attaching Running-Config and LOG and a larger image below.
Is there any way to create alert when ASA firewall DHCP scope is reached at 80%? Does ASA create any log on DHCP usage?
Hello All, Our organization is in the process of connecting to the Department of Homeland Security’s (DHS) Automated Indicator Sharing (AIS) feed. After an update a little while ago to the Firepower Management Center we where given the ability to ...
Hi, New REST API based pxGrid 2.0 is supported in ISE 2.4, and is backward compatible with clients that only support XMPP based pxGrid 1.0 according to this https://developer.cisco.com/docs/pxgrid/#!parity-chart-between-pgrid-1-0-and-pxgrid-2-0/supp...
Hello, We have an ASA with Cisco Firepower and I want to create a rule to only authorize HTTP and HTTPS traffic (without decrypt HTTPS traffic) regardless of the port used (standard or not). I know ASA can inspect HTTP traffic on non standard port w...
Resolved! FirePower Security Intelligence Question
Hello, I've noticed an increase in IOC's being triggered due to hosts attempting to access hxxps://gogo.thepowerrangers.com.End users are obviously not trying to get to a power rangers site. It seems to be a URL redirect. Has anyone else found thei...
Good Morning, We recently changed our internal DNS Servers and were looking to change them on the firewall. When we did, the firewall was no longer able to resolve addresses. We failed back but noticed that in the ADSM that the outside interface wa...
Hi all,First post here Looking for some help with a site-to-site VPN issue on a Cisco ASA 5510.I have two subnets, 'internal' and 'VOIP', both of which need to route traffic over the VPN to the remote site.Traffic from the internal subnet routes fine...
Hi!OK, clearly I am in over my head here. I am trying to do a port forward for Plex running on a NAS inside the 5505. I have tried tens of different ways, and now I have run out of guides... What is the smoothest way of doing a port forward?David
Hi, I needs experts advice as I have issue of url filtering configured on FMC under mandatory category. I have rules setup and action allow but its not matching traffic. below is my scenario. Rule - 1 : Adult/Gabling Categories - workingRule - 2 : U...
