Good Day, I have a situation where I am using ASA in a non-standard way. I have run into behavior that I do not understand and hope that someone can explain to me. This is a sample topology of what I am dealing with: The "dmz" interface is not a rea...
I was able to setup my Cisco ASA5540 for Internet access from inside servers to the outside (i.e., I can hit websites, and ping hosts to the outside, and I can ping the inside hosts at their IPs from the firewall), but I cannot figure out how to allo...
Hi, I am trying to configure TACACS on management interface of ASA. I can ping the ISE servers from management interface. aaa-server ISE-SERVER-GROUP protocol tacacs+aaa-server ISE-SERVER-GROUP (mgmt) host 192.168.10.10 timeout 5 key *****aaa-serve...
I am configuring a Firepower 2120, using an ISOLATED network (no internet access). All I have is the console connection. Can I use the FXOS CLI to enable interfaces, so that I can build and test it before shipping to a remote location?
Firepower User Agent 2.3 installed on Windows Server 2012 R2 (clean install) SQL Server Compact 3.5 SP2 32-bit Installed SQL Server Compact 3.5 SP2 64-bit Installed .NET Framework 4.0 not required due to OS version Added into FMC All is fine until I ...
Hello, I am running/using Cisco FMC 6.2.13 virtual appliance. Recent vulnerabilities Nessus Scans recorded one High Vulnerability that ask me to update OpenSSH from current 7.3 version to 7.4 and several Medium Vulnerabilties that ask me to change th...
I want to know, is there any option to export the rules from Prefilter and Access controller policy to excel format? FMC Version is 6.4.0 Appreciate any inputs..
Hi guys,I'm a longtime ASA with Firepower user. First time FPR/FTD setup. I have a single FMC that manages all my IPS sensors (including remote sites). Typically, for a remote site, I setup the ASA first with VPN tunnels back to the office. And a lay...
Hello- First off, let me be clear I am not super good at configuring ASA5505 firewalls so please be patient if I am struggling with getting some things to work. I'm much more of a PFSense man. I inherited an active ASA5505 firewall many years ago th...
Hi, I'm trying to find the serial number of Cisco NCS 5500 series devices using SNMP WALK, but the OID 1.3.6.1.2.1.47.1.1.1.1.11.1 isn't working, 1.3.6.1.2.1.47.1.1.1.1.11.4097 gives the serial number instead. isn't there a single OID which gives the...
Hi all, I try to get the ssh access to Firepower2120 via management interface but unssuccesfuly. I dont have the strong encyption license on my device and I know that ssh cant be work. But Cisco.com saying that I can connect to ssh via management por...
Hi ThereI was installing a certificate for anyconnect VPN and i have managed to import a PKSC12 but forgot to enter the passphrase during installation.The enrollment failed to deploy and i couldn't remove the certificate because it was in use by anyc...
Hi all, On an ASA 5505, is there a way to limit the bandwidth per user unless there is little activity, which would then allow the user more bandwidth. For instance, if I have a 100mb internet link, and give all connections a guaranteed 10mb, could i...
I am converting a existing ASA to FMC/FTD (6.4) and using the Firepower migration tool (v. 1.3.1-3051). During the "review and validation" I am wanting to change the mgmt IP (Diagnostic1/1) so that it doesn't overlap with the existing production ASA...
