I am looking for advice on which tools people are using to analyse syslog data from their Firepower modules to get detailed information on user Internet access. I am able to send the data to our syslog server, and have set up the free version of Splu...
Forum Posts
Resolved! ASA NAT rules
Hello,I have a question about NAT rules on the ASA: they have no action statement and could anyone please tell me do they actually do anything?I am attaching screenshot.
Can someone help me to understand how a firewall makes a routing decision? I have some traffic which needs to get to a subnet not directly attached to the firewall. there is a static route to that subnet, however the nameif subinterface is not the s...
Trying to find a way to create a site to site tunnel using something more similar to ACL on ASA. For example we have a remote appliance that needs to have a site to site to main network using 10.0.0.0/8 as destination (or would have to list out 100+...
Hello Experts, Is the below NAT statement is correct. There is 2 different object provided in the destination nat (Outside,Extranet) source static CS_App_2 CS_App_2 destination static obj-10.155.185.220 obj-125.16.239.77 Also please provide me the re...
Resolved! ASA VPN tunnel
Hello Experts, Whether we can use the same policy and transform-set for multiple tunnels? eg: I have created one policy and one transform-set in router(IKEv1).I planned to add multiple crypto-map for different customer and separate interesting ACL in...
We are running ver 6.2.3.14(build 41) of Cisco Firepower. Is there a way to get an exported copy of users from System>Users either as a .csv or any format for that matter? I have looked around and I can't seem to find a way to do so. Any answer or al...
Hello All, Has anyone tried this or has a good idea on the effect? I have not been able to find any discussion or documentation about this specific adjustment. As a short-term mitigation to an overtaxed ASA, I'm considering reducing the setting for ...
Hi, First of all, I would like to thank you for taking the time to help me with my issue. i am working on a Cisco ASA5516 and i am having trouble to access the internet from my DMZ and DC's. On the DMZ, i have one Server working as WSUS and AntiVirus...
Resolved! Encryption
Hello experts, I have seen the encryption strings as des, 3des, aes while creating the site to site vpn tunnel. What is the difference bt these 3 methods and which is preferable to use for encryption? Is there any encryption string apart from the men...
Hi All,We've had an on going problem with the user agent for firepower since day 1, at the moment it just keeps saying "error processing event record - No domain information" (see screen shot). The Active directory server has checked in and shows gre...
On a Firepower 1010 running FTD, how do you change the https management tcp port? Trying to find equivalent of the asa command "http server enable <port>"
When is it totally safe to turn off H323 and H225 inspection on Cisco ASA firewalls? We have VoIP traffic between our data centers (all internal and no NAT) but they are separated by a firewall (due to security/audit requirements) and looks like the ...
Hi guys, I have FMC (Currently running software version: 6.2.3.2) with two firewalls added on it. I have deployed policy on each device (also running v6.2.3) and I opted out for Balanced Connectivity and Security which results in: This policy has 9...
Hi all. Im pretty new to Cisco ASA so meaby this is a stupid question I have a ASA 5525 that runs a old ASDM so when i want to run ASDM i get "unable to launch manager from 10.10.10.1" But when i downgrade my Java version i can connect without proble...
