So I am working on getting our firepower for our company setup. So far got things set up for the most part. Now I am just getting connectivity over site-to-site and make sure I can access servers and services throughout. I was adding rules for our XD...
Hi All, Pruchase threat defense, malware licenses and need to implement it in FDM running in air gap network (no internet connectivity). Does it require any particular license for such scenerio. I'm following below article to do implementation http...
I have a standalone ASA5508-X running the latest ASA & ASDM code - ASA 9.16(4)76, ASDM 7.22(1). I've reimaged the SFR module with the latest 7.0.6-236 image (with the plan to patch this to 7.0.6.3-50). There is no configuration on the SFR other tha...
Hello guys,I currently face the issue can't donwload the switch configuratio from solarwinds. And here is the error message when I click downlaod running config " Connection Refused by Ip: x.x.x.x. and when I look at the logs on the switch, it's show...
Hello Everyone, We have deployed two cisco virtual FTDs on our environment and configure them as HA. Those firewalls are connected with core switch over ospf and they are working seamlessly. However when the standby unit become active it will lose t...
I have about 50 nats most are (inside,outside) object-group network1 object-group network1 dest remobject-group network1 object-group network1 I need to add at least 50 nats above these. I need to do a:nat (inside, outside) 1.1.1.1 2.2.2.1 dest r...
Hello,I am hoping to get some help in deploying HA with FTD 2140 devices. We recently upgraded to 7.4.2.1 (build30). Since the upgrade, the HA pair went into Active/Active and I have not been able to correct the issue. I forced the HA to break. When ...
I need to create an ACL (or multiple ACLs) on my FTD2130 to allow hosts to the huge list of IPs and URLs required for Office365 (located here: https://support.content.office.net/en-us/static/O365IPAddresses.xml ) How can I do this automatically/scr...
Hello, We are using access point cisco air-ap1815i-i-k9 that are connected to our network and controlled by controller of same model, we configure a RADIUS parameter in WLAN (SSID) settings, we tested the cisco controller with the RADIUS server and t...
Hi everyone,I’m working with an architecture that includes two 3110 chassis, each hosting three instances. The instances are configured in an active/standby HA setup. However, I’ve noticed that when all three instances are running on the same chassis...
Hi Community,I have FMC with L7 IPS license outdated, so I could not deploy my rules down to my FPR,I've been told I could deploy rules by closing all L4-L7 functions.Where could I check if all of L4-L7 functions was close?BTW, I've found a settings ...
I have an architecture with two 3110 chassis, each with 3 instances. These instances are in active/standby HA, and when I have all three instances on the same chassis, the memory of Snort 3 increases, and we start having issues with the applications....
HiI have a 2 ASA 5555X and firepower module run on this ASA, and manage through FMC.I want to change the IP modules and FMC, but I realized it's a risk.Please give me the best solution to change the IP.
Hi Team, We are currently encountering an unusual issue within our network. According to the traces conducted at the servers, it appears that the TCP RESET packet sent by the Source Server is not being received by the Destination Server. It is not...
Hi to everybody,It is not so clear to me what the discovery default action does. I am asking this because my last rule is deny from outside to inside. Therefore i suppose that the FTD does not pass to the default action that is below the all deny rul...
