Hello, Is there a REST API (e.g. for Firepower Managment Console, etc) that will allow you to add/remove custom Snort signatures/IDS Rules on a Firepower IDS? What about IPs to detect/block on? The closest I found was "PUT Inidicator" for the Firepow...
Forum Posts
Hello all, As a network engineer working on a project to deploy and configure a series of ASA 5506-X running 9.9(2) iOS, I have encountered the following important issue:When I configure a NAT Exempt rule for traffic flowing from one zone to another ...
Is it possible to setup a correlation event that will temporarily blacklist an IP address based on receiving a # of intrusion events against a destination IP? Or is there another way in the FP to do something like this? The appliance is sitting inli...
HI.I am new to this ASA, used to use a Cisco Meraki! I have a NAS on witch I have an FTP server, IP 192.268.1.95.From the outside I get connected with the FTP server, but do not get the drive or folders back to client.It fails after MLSD. I am not ab...
I don't see any release notes indicating what is needed to run the latest ASDM 7.12(2). When I try to run ASDM on the latest version my windows 10 throws an error "This app can't run on this PC". I have Java Version 8 update 171. Anyone else try? ...
Hi,I have downloaded "asa917-32-k8 " , Please help to locate the correct asdm version From the download site I found the supported version for asa 5520 is asdm-781-150 . Which one is correct ? https://www.cisco.com/c/en/us/td/docs/security/asa/comp...
Hello, everybody. In my device, it is actually a router I have the following configuration line: ip nat inside source static network 10.0.0.0 10.128.194.0 /23 extendable no-alias which nats all the IP addresses in the 10.0.0.0/23 to the corresponding...
Hello everyone.I have a FTD 2130 firewall sitting behind internet router which is just route all public range we purchased to firewall. In FTD we do not have any Public IP attached to internet, we use Public IPs on NAT configurations with Proxy-ARP. ...
Hello all, I am trying to connect via putty to a new ASA 5506 without success.I have checked the settings on putty and everything is ok. I am using a prolific usb-to-serial . I have changed usb ports, i disabled/enabled usb-to-serial from Device Mana...
Resolved! Check DSCP value in FMC or FTD Firewall
Dear ALL, We have two sites, the IP-PBX main unit is installed on HQ, and the branch's IP-phone is connected to HQ via L2 leaseline, we had set the DSCP value (which is connected to IP-phone) in the Cisco2960 switch port.In now, Can we check the DSC...
I have a 5512X running Firepower from the ASDM. I am trying to get firepower up to 6.2.3.12. i have reimaged the firepower twice because the upgrade gets stuck at 55% on 800_post/021_reinstall_SRU.sh. This happened at 6.2.3.8, I reimaged was able t...
I am follwoing the below procedure to register the FTD2110 but below commands are not supported in fxos cli. kindly suggest for it or share some valid procedure for itFirepower 2100: Configure Permanent License ReservationStep 1At the ASA CLI, enable...
Hello;I'm new to IT security world and Cisco as well.I want to block my inside network (servers) to access the outside world (internet) which is allowed by default in factory-default config of asa 5505.It is how I get it done:ciscoasa(config)# object...
Hi When submitting for analyze option on a captured file. How do I know where to check the results?Can I get emailed? See attachment for eg
I do a lot of my work as a consultant remotely. So when I need to submit a TAC case on a piece of gear, it is handy to be able to do a "show version" to get the serial number of a device to open a TAC case for my customer. Sometimes the sites are c...
