i am having ASA firewall with 9.6 code. when i create and apply ACL as below it works fine ASA(config)#access-list abc permit icmp any any echo-replyASA(config)# access-group abc in interface Outside but when i wanna allow specific IP to ping to Outs...
Forum Posts
Hi there!After upgrade from 6.5.0 to 6.5.2 we've got an issue on one of the FTD in a HA pair.We are getting "stunnel exited 5 time(s)" warning.In the logs I see attempts: stunnel[15463]: Generating stunnel config file at /ngfw/usr/local/sf/lib/perl/5...
In packet capture options when i mention the source or source and destination , packet capture buffer only displays the ingress interface traffic and it does not show any Egress interface traffic. Below i have attached the screenshot. what could be t...
Hi Guys,I am trying to enable some debug on an ASA5510 running 8.2(1) and want this debug sent to a syslog server in a test environment. My current config is below -logging enablelogging list test-ssh message 711001logging buffer-size 10000logging co...
I want to force the FirePower Admin Password to change every 91 days in Windows Active Directory. Will this cause any issues with the FP operation if the password expires in between times that I log into FP or if the password changes in between times...
unable to commit the configuration. Does the registration expired ?
Hi Everyone I am having a really tough time to understand the FMC and Nessus integration, where the host input APIs come into the picture and how to make it done in general, can someone please help me with the step by step approach with the files ne...
I found out recently my FMC's (6.4.0.4) URL filter was not catching HTTPS traffic (My Bad), So I started researching how to do this. I have downloaded the cert from my CA and I was about to install it and setup the SSL policy. Before I do this can I...
Hi community, I try to update the BIOS on the FMC 2500 with the BIOS Upgrade File for Version 6.3. I have installed version 6.3.0.3 on the appliance. The bios version is C220M4.2.0.13d.0.0812161113. It is the passive peer of an HA Cluster. I get thi...
For those familiar with both FTD and FPR, which features did FPR lost that FTD had, and which features did FPR gained that FTD did not had? While the traditional, pure L3 Cisco ASA still has its niche and it is very well known by the security communi...
Hi we just want to perform File checking on known files (Hash comparison) and also local analysis on FMC, when it is a unknown file. We do not want to upload any files in the cloud. How must a Policy for this look like? I read a lot in the docs, but ...
Hello, Could you guys please explain me the best practice for configuration of Public ip address for web service(website) whether set it directly on web server which is behind a firewall\waf\ips or set it on firewall and do forwarding to private ip a...
Hello everybodyI have a firewall version 4.0 and I did two different access-list but I got (hitcount=0) I'm confusing in the following : interfac Vlan12nameif insidesecurity level 100ip add xxx.xxx.xxx.xxx interface Vlan400nameif outsidesecurity leve...
Firewall Brief configuration overview below :- 1. Static route is configured.2. ICMP is allowed3. both subnets of switch are allowed on firewall4. Firewall LAN interface 192.168.10.2/245 Permit both subnets of of switch (192.168.10.0/24 & 192.168.20....
Any help would be great. It used to work with 6.2
