I have a webserver on a DMZ. Webserver should be accessed from public internet as well as from internal networks.They access the server with http://www.url.com and both internal users and external gets the same IP from the DNS servers. Lets say: 85.1...
Forum Posts
Resolved! SNMP Configuration on FMC
Hello, I would like to ask how could I configure SNMP in FMC for the firepower devices(2110). As I searched there are 3 places with SNMP configurations. 1) System>Configuration (It is used for the FMC to be polled)2) Devices>Platform Settings>Polic...
Does anyone know if it is possible to view live data from a specific client IP, or more specifically, the ports the firewall is blocking from that client? A client has a piece of hardware that’s trying to connect on some obscure port but the installe...
HiI have a problem when I execute the policy deployment in order to load the configuration changes. Yesterday I followed the procedure about the bug CSCvg58754 (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg58754/?referring_site=bugquickviewredi...
Resolved! FTD NAT Matching
Hi Guys, Another NAT related question, i have a need to do some funky translations from our DMZ to the inside of our network for our migration, below is the topology for the lab environment that I'm testing this stuff on, the red line indicates the p...
I have an Active/Standby pair of 2130 appliances that is having a problem with the management interfaces when failing over from the primary to the secondary. When failover is invoked, the IP Address of the primary does not move to the standby and is ...
For my external interface on a 2130 pair in HA I have a port channel definedOn that external port channel, I have a sub-interface defined that has the main external IP which is part of a /23 public subnet on vlan 254 I am trying to add additional pub...
Resolved! FTD Sizing help
FTD 2110 has throughput of 2gbps even after applying licenses for threat defense + url filtering, nextgen IPS .. is it true..I had checked in Datasheets. Would like to know if my internet speed is 500 Mbps and have plans to upgrade it to another 1 or...
Hi all, simple question but I have a hard time figuring this out: I am using the FTD 6.4 Ansible module to upload a file to the device. What is the file location on the device after the upload? I can only specify the source location on the Ansible ho...
2130 HA pair running 6.4.0.1. I am setting up outgoing NAT/PAT. There are several internal interfaces with their own private subnets. My intent is to IP masquerade all outgoing connections from internal private subnet A to a pool of public IP's on my...
Hi All: What steps do I need for the below scenario to happen. I want to have a site to site connection but instead of having private addresses via the tunnel I will have one side have a private address being natted via static nat and then that stati...
Resolved! Firewall
Hello All, Could you please explain me the difference between ASA firewall and FTD firewall in terms of behaviour? Thanks.
Hi there! I was just wondering, if it is possible to "move" or convert a valid FirePower ASA License (Content Filter for example) to a license, that I can import into the FirePower Management Center? I'm using an Cisco ASA 5516 -X (FirePower Ver...
Resolved! Privilege level assignment via RADIUS
Hi all,I'm looking forward to use RADIUS Authentication for all user connecting to my ASA Firewall Version 8.6(4) and for a second customer Version 9.1(1)Now i would like to set some privilege level for those users connecting to the ASA. Because one ...
Hi everyone My company using WSA and ASA with firepower, flow under the action of WCCP, be ASA redirect to the WSA, when the user's endpoint access to the Internet, I view the event on firepower, found that the source address is the address of the P ...
