Hi,I have one interface Eth2 for failover link (statless) and another interface Eth3 stateful failover.If I remove the failover link Eth2 OR stateful lin Eth3 from Active firewall, will it failover to Standby ?From the cisco document, i read that, fa...
Hi All, I have a customer converting from ASA to FTD. We are using the Migration Tool to convert the 4000 Access Rules and NAT's, and I am importing all the objects using the REST API. However, the REST API does not support adding routes at the momen...
Hi allA question to the lucky few who have access to the Cisco development schedule: Is there any talk of allowing policy routing to be supported in the FMC GUI other than using Flexconfig? RegardsFredrik
I am entirely new to Cisco hardware and am slowly learning how to configure things via console. I have a 2911 running IOS 15.7.3. It's stock configuration with 3 GigabitEthernet interfaces. I also have a 4948 Switch. What I am wanting to do currently...
What is the latest ASA version?
Folks, We have a couple of Nexus devices and IOS devices on very recent codes. However we have a network vunerability scanner that keeps alerting us on the following: 1) Deprecated SSH Cryptographic settings2) SSH Server Public Key t...
Cisco 1941-SEC / K9 IOS 15.2 (2) T1 router R1(config)#crypto isakmp policy 10R1(config-isakmp)#encryption ?3des Three key triple DESaes AES - Advanced Encryption Standarddes DES - Data Encryption Standard (56 bit keys).What is their operation encrypt...
Hi Community Team Does anyone know, if it is possible to get the Categories and apps list from FMC?, is avaiable to download or copy in somewhere or from FMC? I can't copy them directly Thanks
I have an ASA 5516 that is having intermittent issues so is being swapped over. I have taken a backup of the main ASA via ADSM and have restored onto the replacement device.I was just expecting to be able to just swap over the ASAs and reboot the swi...
Dear allI have a quick question for Firepower 1010 ASA firewall: Does the outside interface E1/1 support VLSM IP address? They want to assign a static IPv4 address with /22 netmask (255.255.252.0) on Ethernet 1/1 (outside interface).I can’t find the...
Hi GuysLAN (inside) network - 192.168.10.0/24WAN (outside)network - for eg 137.14.191.12/28Device: Cisco Firepower 2100 series managed by vFMC I have around 15 servers residing inside the campus that needs to be opened for public. Each server has dif...
Hi, We have two Firepower 4110 units that only have 2 logical interfaces. One is from a Gigamon tap and configured as a passive interfaces and the other is the management interface. We are using these units essentially as out of band IDS units. They ...
Dear All, Please, I need guidelines on how to configure inspection policy for access rule on ASA Firepower for inbound traffic.Currently, I have 3 policies configured as following1. default policy2. Policy for outbound traffics inspection which worki...
I have Firepower 8000 Devices at Core Layer of my network. Code version for these Devices are 6.3.0.1. FMC for this device managed from is 6.4.0.4. Does Firepower 8000 support FQDN Objects ? if yes can you provide reference to it ? and tested it ?
Hi guys, I'm running a firepoower 2100 with asa image 9.12.2. An interface of the firewall is connected to production network in a uncontrolled space. For this reason I was trying to check some sort of network attack on that interface to double check...
