My FMC is configured with Active Directory as Identity Source. I have a rule that blocks websites categorized as Gambling for AD user group "RestrictedUsers". Now, I want to change my Identity Source from AD to ISE and retain the existing Rule i.e., ...
Forum Posts
Say the interesting traffic is ANY source on the ASA where you have IPSEC tunnels built. If I ping a destination IP which is deemed interesting traffic, what is a good way confirm the traffic is taking the IPSEC tunnel?
Resolved! Removing Network Objects
I'm trying to remove multiple network objects in an ASA running 9.1(3), but first I have to remove the NAT relationships connected to them. When removing the NAT rules, I am still not able to remove the object itself. To enter config mode for the ob...
Hello All, I was checking to see if below command I can configure at FirePower 8370 Stack. But once I login to one of the 8370 stack member ( 8350 ) , i am not able to find this command available. Also how can I see this preserve-connection is enabl...
Resolved! Ping FTD outside interface from inside
Even when all traffic is allowed I've noticed that I can't ping FTD interfaces except the "nearest" interface (traffic doesn't cross FTD).Is it possible to allow this traffic?
I am having a wired issue, I am trying to put my DMZ VM to outside do 1:1 NAT. It can not hit the NAT rule. For internal, the server is working fine. I disable the firewall of VM already.for the external, I put myself computer on the public IP addre...
Hi!,I configured the access to my web server inside from the outside, but in spite of doing NAT the ACL seems no to be apply on outisde, when I put the IP public on browser from internet , I see how browser change public IP to private webserver IP bu...
If I have the below, hosts trying to reach this subnet from Outside are automatically untranslated correct?:object network Natted_Hostssubnet 200.10.10.0 255.255.255.0nat (any,outside) dynamic interface
Hello to everyone I have a FTD 2110 and when after restore a backup either with FMC or SCP Server .FTD mark as offline in FMC .when ssh to FTD all of configuration is restored and that is OK .I cannot find any solution for this problem
HI, I have a new FTD 2110 to be installed: First step i wanted to connect the management interface to FMC but I can not even ping my local adress : > show network===============[ System Information ]===============Hostname : FTD-1DNS Servers : ...
Hello friends I am configuring an LDAP integration with OpenLDAP in the FMC to authenticate users that connect from a remote vpn. Can any of you tell me if this is possible? If possible, how can I do it? I already have the server with OpenLDAP config...
hello >>>I have FMC1000 with FP2110I want to active internet accessI do IP and I do DNS 8.8.8.8when I ping to 8.8.8.8 the ping is work but when I ping to google.com the bing isn't work I don't know what's problem Is there any solution or advice ?
Resolved! FPR 2110 | ASA OS Upgrade
Hello, We have a few FPR2110s and running the ASA code on them. I am planning to upgrade the ASA OS code from 9.8.2 to 9.8.4; however, when I issue the dir disk and dir flash commands at the asa cli the current os is not listed. Also, when I issue t...
Hello>>> Can't register the license for Firepwer as it can't connect to the licensing server. I can ping any server on the internet using IP but not domain name.It seems like that return DNS traffic are dropped by the Firepower for some reason. DNS ...
I have a strange situation I've never seen before. I have a firewall with a DMZ with one server in it. It's been set up for years and everything has always worked fine. The server has a static NAT translation it uses when it accesses the internet. ...
