Network Security

Resolved! Failed to create static route on FTD CLI for FMC

Hi All, I seemed to have lost connectivity from our FTD device to the FMC. I can see that the BR1 interface is up and enabled: > show network===============[ System Information ]===============.......IPv4 Default route Gateway : 192.168.50.25 =...

Cisco ASA 5545 x mem at 93%

All I have an ASA HA pair where the primaryt shows 93% mem used. The secondary is at 64%. The reason for the difference was a unique vpn that was created only on the primary. Due to there was only 1 uplink to the ISP switch. This vpn does have a ...

nat conversion

Hi everyone, Please help me on how to convert this 8.1 cisco asa configuration into 9.1. Appreciate the help. global (outsid) 2 150.x.x.x nat (inside) 2 10.1.200.0 255.255.255.0 tcp 100 100

Resolved! Setup Cisco ASA 5506-X with FirePOWER routers

Hello, I will try as simple as possible to explain how I want to set up the router, what is cureently being done and what are the problems. It is currently only one range, soon will be needed and another range of address but to be completely equal to...

Resolved! converting 8.2 to 9.0 NAT example

I've gotten most of my NATs figured out but how do you convert this example into the new NAT format? CAn anyone assist?static (INSIDE,OUTSIDE) tcp 10.10.10.1 www 20.20.20.1 www netmask 255.255.255.255static (INSIDE,OUTSIDE) tcp 10.10.10.2 11080 20.2...

What are the advantages/disadvantages ASA and ISE integration?

Hi Friends. We have installed ASA 9.9.2 on the Firepower 4110 in a project that. After that I want to integrate ASA with ISE. I wonder ASA how to take advantage of ISE. I did not find enough information in the documents. What are the advantages and...

FTP passive and active on ASA

Hi all I wonder if anyone can assist with this. I have a customer with a 5505 ASA which has restrictions on outbound ports. He needs to use both Active and Passive outbound FTP connections but I am struggling to have both running. With inspect ftp ...

Dynamic object-group update - ASA

I am working on a project where an ACL will have a set of revolving IPs (not often, but from time to time a new node will be added/removed in a cluster that needs access into my network) and I have been provided with a URL to an XML document containi...

ASA 5515-x with Firepower (fmc NAT)

Hello! I have ASA 5515-x with sfr module installed. I have a couple Firepower Access Control Policy rules configured through FMC. And I have some Access rules and NAT rules (internet assess, internal servers publishing etc.) configured through ASDM...

Resolved! Threats from internal hosts

We have an in-depth internal penetration testing under way at the moment and it is becoming clear that our Firepower for ASA sensors are not blocking traffic sourced from IPs within the $HOME_NET range. We have a Trend Micro DDI probe at each of ou...

Resolved! Deployment of firepower management center virtual appliance on vmware vsphere

Greetings, Can anybody help me know whether cisco firepower management center virtual appliance be deployed on free version of vsphere hypervisor? Thanks

Cisco ASA 5505 Cannot type in commands in Putty or Hyperterminal

I have a Cisco ASA 5505. This has been previously configured. I am trying to give it a factory reset and I am being able to connect via Putty and Hyperterminal but I cannot enter anything. I am able to go into ROMMAN mode by using the esc key. Any he...

Resolved! Cisco Access list using source ports rather than destination ports

Can i lock a cisco asa 5585 firewall access list down to use 'service ports' rather than destination ports. The reason i ask for is that we are trying to configure Sharepoint 2013 on our firewall rules for the DMZ. It uses tcp/135 and tcp/53 but it a...

Resolved! CLI changes occurring directly on managed devices without using the FMC?

Just curious if I could make any sort of CLI changes on my managed devices w/o using the FMC, and if I did would those changes be synced with the FMC or is it the case that once I set up a device to be managed by the FMC that all my configuration cha...

Problem with URL filtering ASA5516 with firepower services

Hello everyone, I have a problem with my ASA5516, it does not filter the communications via URL FILTERING, in the logs I can see only the default policy (trust all traffic), I have the license URL FILTERING enabled, and the access policy enabled, I d...

Network Security

Forum Posts

Resolved! Failed to create static route on FTD CLI for FMC

Cisco ASA 5545 x mem at 93%

nat conversion

Resolved! Setup Cisco ASA 5506-X with FirePOWER routers

Resolved! converting 8.2 to 9.0 NAT example

What are the advantages/disadvantages ASA and ISE integration?

FTP passive and active on ASA

Dynamic object-group update - ASA

ASA 5515-x with Firepower (fmc NAT)

Resolved! Threats from internal hosts

Resolved! Deployment of firepower management center virtual appliance on vmware vsphere

Cisco ASA 5505 Cannot type in commands in Putty or Hyperterminal

Resolved! Cisco Access list using source ports rather than destination ports

Resolved! CLI changes occurring directly on managed devices without using the FMC?

Problem with URL filtering ASA5516 with firepower services

We want to celebrate the October Spotlight Award winners!

Get ready! Great things are coming to Cisco Community

New name, same great product: Cisco Spaces

FMC - Policy optimizer for unused policies & app id policies

Anyconnect vpn load balancing using DNS roundrobin with SAML possible?

Deployment failures on SFR via FMC

It's possible to reload SNMP service on Cisco FTD 2120

RADIUS authc for SSH access to FTD, session terminates after login

After upgrading Snort2 to Snort3 errors popping out and other problems

FMC Site to Site VPN Question

FPR1010 Port 443 https Web Access issue

Cisco Firepower 7.2 - Blocking Page with Malware & File policy

Support port mirroring on Cisco ASA 5515X Layer 3 port