I'm trying out the setup of a static to dynamic IKEv2 IPsec VPN. The VPN is working, and pings from the client PC 2 in the image below (192.168.2.2) are successfully making their way to the client PC 1 in the topology. ISAKMP and IPsec SA stats are ...
There have been problems with Ransom ware sites,we have list of site IP address that cause problems, so that is easy to add to a black list groupbut some locations are only known by their FQDN from certain Domain serversso we blocked that Domain serv...
Security Intelligence Events shows https://www.microsoft.com as being URL blocked and classified under Security Intelligence Category as "URL Malware." Is Firepower's Collective Security Intelligence (CSI) URL blocking Microsoft.com?
Hello Support, I have a question in regards to accessing the http interface of the logical device created in the FirePower chassis. I created the logical device, but cannot access the http web page. It reads as blank. I am able to SSH to this without...
hi,i'll be configuring AAA on our FWs and need to confirm if this single command line for AAA accounting is enough to log the executed commands to ISE: aaa accounting command <ISE-GROUP-NAME> or just these two? aaa accounting command privilege 1 <ISE...
Hello there. We currently have a ASA5515-SSD120-K9 we purchased for use with CX bundle. Cisco marked this model of firewall for end of service in August 2020 and encourage to migrate to Firepower. We migrated this CX to firepower some time ago using...
Hi,Can I know if it possible to do manual IPS signature update on the newer NGIPS (eg. Firepower 4100 series)
I am trying to set this up for SolarWinds, this works a few of my other ASAs. I need some help. ASA Version 9.8 CMI as follows: ASA(config)# snmp-server group ALL-ACCESS v3 privASA(config)# snmp-server user SNMPnetwork ALL-ACCESS v3 auth sha SNMPword...
Hi when i try to make a password recovery i use the command confreg but i omit to put 0x2102 and now im able to boot login to the ASA but the startup-config is not loading the config. here is the MSG: Ignoring startup configuration as instructed by ...
I have a location that we acquired that has a second location connected to them via a site-to-site tunnel. We just took over management of the hardware at the second location and need to get syslog messages sent to our existing syslog server. The exi...
I have a HA pair of Virtual FTDs on a couple of ESXi 6.5 hosts in the lab. They were built with the 6.4 image and are using the local FDM management. They have been patched a few times with the 6.4 patches and are currently running 6.4.0.5-23.I hav...
Hello, I have two ExpressRoute connections to Azure. They are on the ASAs. (Please see network diagram). Firewalls are running as standalone - no failiover pair. Core switch is running OSPF with firewalls. Firewalls are peering with AZURE using BGP. ...
Hi All, I have a request to open http port from the below addresses , we have route already in place and phones work as they should...but they cannot access the phones gui from their end... So am i right thinking its juts a matter of cr...
Hi people.Please can you help me?I erased disk0 and whenever i upload the ios after a reboot it doesn't boot while when the ios is uploaded works ok.Did i miss a command that i have to type to save it?show flash doesn't show the ios installed.
I have Cisco ASA 5516 and i want to connect fortigate via IPsec . IPSec its done but i cant ping from my local to remote, and remote to local. Maybe someone to help me solve this issue.In this issue from my local server can ping gateway on fortigateb...
