Can someone help me to understand how a firewall makes a routing decision? I have some traffic which needs to get to a subnet not directly attached to the firewall. there is a static route to that subnet, however the nameif subinterface is not the s...
Hello Experts, Is the below NAT statement is correct. There is 2 different object provided in the destination nat (Outside,Extranet) source static CS_App_2 CS_App_2 destination static obj-10.155.185.220 obj-125.16.239.77 Also please provide me the re...
Hello Experts, Whether we can use the same policy and transform-set for multiple tunnels? eg: I have created one policy and one transform-set in router(IKEv1).I planned to add multiple crypto-map for different customer and separate interesting ACL in...
We are running ver 6.2.3.14(build 41) of Cisco Firepower. Is there a way to get an exported copy of users from System>Users either as a .csv or any format for that matter? I have looked around and I can't seem to find a way to do so. Any answer or al...
Hello All, Has anyone tried this or has a good idea on the effect? I have not been able to find any discussion or documentation about this specific adjustment. As a short-term mitigation to an overtaxed ASA, I'm considering reducing the setting for ...
Hi, First of all, I would like to thank you for taking the time to help me with my issue. i am working on a Cisco ASA5516 and i am having trouble to access the internet from my DMZ and DC's. On the DMZ, i have one Server working as WSUS and AntiVirus...
Hello experts, I have seen the encryption strings as des, 3des, aes while creating the site to site vpn tunnel. What is the difference bt these 3 methods and which is preferable to use for encryption? Is there any encryption string apart from the men...
Hi All,We've had an on going problem with the user agent for firepower since day 1, at the moment it just keeps saying "error processing event record - No domain information" (see screen shot). The Active directory server has checked in and shows gre...
On a Firepower 1010 running FTD, how do you change the https management tcp port? Trying to find equivalent of the asa command "http server enable <port>"
When is it totally safe to turn off H323 and H225 inspection on Cisco ASA firewalls? We have VoIP traffic between our data centers (all internal and no NAT) but they are separated by a firewall (due to security/audit requirements) and looks like the ...
Hi guys, I have FMC (Currently running software version: 6.2.3.2) with two firewalls added on it. I have deployed policy on each device (also running v6.2.3) and I opted out for Balanced Connectivity and Security which results in: This policy has 9...
Hi all. Im pretty new to Cisco ASA so meaby this is a stupid question I have a ASA 5525 that runs a old ASDM so when i want to run ASDM i get "unable to launch manager from 10.10.10.1" But when i downgrade my Java version i can connect without proble...
Another ASA Backup Question...I would like to use EEM to have a 7-Day backup, using the backup command in the ASA. I have the following information from balaji.bandi and this post (works great!):1. Requirement is 7 configuration files2. Test-run ever...
I know it can generate a ton of logs but is it best to enable or disable this syslog?
hello team, i want to use the FMC with Firepower. Now i tested the system with only 1 firepower module (hardware) and i always have a CPU usage with an average of 80%. It's so high, that my system is to slow to handle it. The Software of the FMC and ...
