hello team, i want to use the FMC with Firepower. Now i tested the system with only 1 firepower module (hardware) and i always have a CPU usage with an average of 80%. It's so high, that my system is to slow to handle it. The Software of the FMC and...
Forum Posts
Hello Great People, I am getting this error in Cisco FMC 4500(Current Version- 6.4.0.1) when i pushed the policy to the devices(ASA's and 8350's). all devices has this health alert. all devices are on the same version 6.4.0.1. "https://www.cisco.com/...
Hello, I would like to ask if the FTD needs to access the internet DNS. I have high availability FTD 2110 managed by FMC and I see in the events that there are several queries to DNS that are blocked. DNS isn't managed by FMC? Do the FTDs have any r...
GreetingsI have an vFTD running 6.4.0.4 managed by an FMC running the same version. Now I need to migrate this FTD to another FMC. Exporting and importing the policies are quite straight forward but what about the VPNs. We have quite a few and I woul...
Did anyone else notice Microsoft.com was unreachable for most of the day Monday if you're using Cisco's Firepower with the Security Intelligence Feed? I am posting this so people are not wasting their time trying to find the root cause. We did not se...
I am enable to find option in FMC 6.3.0.3 to enable inter-chassis fpr9300 cluster interface monitor?
Resolved! ASA 5510 and AIP SSM-20
Hi everyone, Just bought an ASA 5510 with a Security Plus license.Can someone clarify me if I buy the module AIP SSM-20 with IPS this function will work? Or I need another license to IPS work?Thanks in advance!
Resolved! Cisco ASA 5506 DMZ setup
Hello, Am trying to setup a DMZ for a ASA 5506. At the moment we have 3 interfaces active on the ASA which are:gi1/1 outsidegi1/2 insidegi1/3 VoiceVoice has an internal ip with a pat on the outside interface with a public ip address from our range.No...
Hi,I have inside dns server that contains records with private ip addresses. My ASA firewall is responsible for rewriting dns requests from outside hosts. Now i need to make zone transfer between insde DNS server and DNS server that is placed on outs...
Hello Team, We are planning to implement Cisco ASA 5585 SSP-60 firewall in Active/Standby cluster , we have two device of Cisco ASA 5585-X SSP-60 and we have one 8 port 10 Gig module and one 4 port 10 Gig module.Can we use Primary with 8 port modul...
I've seen this done and think I have done a good amount of the leg work, but I'm trying to figure out the details of setting up the identity policies to attach usernames to IPs within firepower. I have the AD agent install on the AD server, but I'm m...
Hi all,I am trying to make my PIX 535 to perform DNS inspection on zone transfer and with every further step it seems more impossible to me. Has anyone done such stuff before?Any help will be appreciated,BR,Lora
Hi Folks, I would like to know what is the total cache memory size for 8140, 8150 and 8350 Firepower Sensors Appliances.My goal is to monitor this value using zabbix and generate an alert if a treshold based on this value had been reached.Example: L...
Hi Getting error on ASA "Unexpected error occurred" while the configuring interface
We have ASA 5545, when we execute show run or show run | in ... , the session hangs and does not come back. this issue happen only in the active unit. The standby mode, session comes back immediately. I did not have any high CPU, leak memory, overr...
