Hi,I would like to confirm the apt placement of IDS/IPS, whether it should be before or after firewall. I have Cisco IPS (two) which inspects packet till layer 7 which are in front of firewall and hence after inspection of traffic for malicious conte...
Forum Posts
Resolved! URL Filtering Updates
Last URL Filtering Update: 2019-07-21 23:14:51 As above, we've had no updates since late yesterday, and getting health monitor alerts today for it.Severity: criticalModule: URL Filtering MonitorDescription: URL Filtering download failure Have tried a...
Hi I just want to check something. cisco states that to upgrade an ha pair, fmc will upload (push) the software to the primary, which will then sync to the secondary ( my fmc is on 6.2.3.4 my ftds on 6.2.1) when I go to select the device to upload to...
As of today, when trying to reach asdm on /admin/, I get:The flash device is in use by another task. The flash device is in use by another task. HTTP/1.1 404 Not Found Date: Thu, 13 Oct 2011 12:19:02 UTC Connection: close Content-Type: text/html404 N...
Hi All, I have a CISCO ASA5545-x. I need to purchase the Firepower and smartnet features. I would like to know if these feautures need a Hardware module to be placed into the FW or if they need only SW to be loaded in the FW. Kindly let me know your ...
ASA Version 9.8(2)!hostname billyasanamesip local pool vpn_DHCP 192.168.2.0-192.168.2.254 mask 255.255.255.0!interface GigabitEthernet1/1nameif outsidesecurity-level 0ip address dhcp setroute!interface GigabitEthernet1/2nameif insidesecurity-level 10...
Hi all,I am testing Cisco ASA H-A with our ACI switches. i m using port channel on ASA + vPC on the ACI switches.I have two port channels1) data --> inside and outside with sub-interfaces as po1.114 and po1.115 for example2) failover --> po2 (g1/7 an...
As part of some internal testing I was involved in I now have a Firepower Management Center 6.4 host running in my VM environment along with two Virtual FTD's in a HA pair (not managed by FMC), a physical ASA5506-X with FTD and another ASA5506-X runn...
Hi All,I've setup the Cisco ASA 5506x firewall with the simple connection.- outsite interface connect to internet.- inside interface connect to my production.- P2P interface connect to the existing network. My problem is I can't access the ASDM from ...
Hi all, I´m really trying to find out, what is possible in regards to the management options with a FTD Device managed by Firepower. We know the basic and simple options using the management interface. The physical management Interface is shared with...
Resolved! Firepower supported devices
There are differences in supported firepower functionality for series 2 and 3 devices. Is there a clear view of what devices are series 2 and what devices are series 3 ?
Hello Community,I'm trying to configure FTDv in transparent mode but I'm encountering an issue. The initial configuration is okay but when connecting hosts (one connect to inside VMnic and the other to outside VMnic) they exchange with each other wit...
Hi, I would like to know if Cisco Firepower supports the command/ or equivalent ip forward-protocol udp 4011? Thanks
Anyone run into issues with FTD, in what appears to be random cases the application detection engine doesn't classify a flow with AVC application protocol / client information? I have seen it on SYSLOG, NTP, NetBIOS-ssn (SMB [TCP 445]), and other app...
We are wondering,if it would be possible to use for example 5506x in transparent mode and connect it between two switches. Then it should control the ip traffic in all vlans. With Sophos UTM I know, this works (you even do not have to have IP address...
