internet-----> Gi/0/0 routerA(config)#access-list 100 deny ip 0.0.0.0 0.255.255.255 anyrouterA(config)#access-list 101 deny ip 10.16.1.0 0.0.0.255 anyrouterA(config)#access-list 102 permit ip 10.16.1.0 0.0.0.255 anyrouterA(config)#interface Gi/0/0rou...
Forum Posts
I have an expired cert that I'm trying to remove via FMC (7.2.9) but I can't find it.In the CLI I see this...webvpn trustpoint sp VPN_x2025-02 ...but in FMC I can't find anything that's using that certificate. I don't see it under any of the VPN pro...
I have increased number of Inspection failure (inspect-fail) from show asp drop, and would like to capture them for further investigation, and wonder what option should I use after capture my-capture type asp-drop ? Thanks.Leo
Resolved! Backup from vFMC to Hardware Appliance
Hi All, Can i download the configuration backup of virtual FMC and upload the same backup in hardware FMC? Does it work? Any suggestions i appreciate in advance. Cheers, Santhosh K Dhanapal
how to prevent and configure my wan interface from flood attack in ASA Firewall [5500 Series].I also tried to use icmp deny any outside and tired to test with kali.ASA denied traffic and but cpu usage is 80% and device is harmful.PLease share if ther...
With Kureli SankarWelcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn from Cisco expert Kureli Sankar how to identify and mitigate network attacks. Kureli Sankar is an engineer supporting Cisco's firewa...
My Firepower 1010 is blinking orang and green, which means it might be cloud connection failure, do I just reset the device or do I have to reimage?Thanks, Nikolai Catey
Hi All, I understand that ASA is Eol soon, but this is for one of our customers, Just I would like to understand if this FW run IPS or any features like DPI, AMP at the moment. FW# show inventoryName: "Chassis", DESCR: "ASA 5525-X with SW, 8 GE Data,...
We work with an organization coming in from an AWS EC2 instance trying to connect to an API we have onsite that's behind our Firepower FTD 2130 (7.4.2.1, managed by FMC) firewalls (there is an external/public NAT'd IP address it hits first, but that ...
I am wanting to create a loopback interface on my FTD via FMC so it can be used a a health check for a clients VPN. I cannot see the option to create a loopback int?
In FMC, there is a easy way to block IPs that are hitting your Firewall, Right Click, Block IP. My understanding is that the IP is put in the Global-Block-List (Objects>Security Intelligence>Network Lists and Feeds). My question is, can you referenc...
After reimaging my Firepower 4110 and downloading the kickstart, system, and manager, I activated and configured all necessary IP's. I am still unable to open the Firepower Chassis Manager Web UI. Any suggestions or questions?
Hello ,Our company is embarking on a new project to install firewalls across hundreds of RTU Scada System sites. Currently, our infrastructure is predominantly Cisco, including switches and routers. There is a debate within our team: one group suppor...
Resolved! Access List Configuration on ASA
Hi All,I would to allow traffic from a client on the LAN ( 192.168.1.10) to google.com through an ASA version 9.22 . Considering that by default , the ASAs are set to allow traffic from Inside ( High Security Level - 100 ) to the outside / Inter...
Hello everybody, our customer has a Firepower 2130 running ASA OS rel. 9.14(4)24 with hundrets ofS2S tunnels. One of the tunnels cannot be initiated by the peer firewall (Meraki). The Firepowercan initiate the tunnel without problems. The customer th...
