Hi,New the world of FirePower and FMC. Have a Firepower 2100 appliance between my main router and Core Network switch. Have an IPSec Site to Site VPN back to HQ that terminates on my main router. In my FirePower Access Policy I have rules that ca...
Trying, through ongoing research and troubleshooting, to configure an ASA5525 running version 9.8(2) to allow bidirectional traffic from two ESXi 6.7 VMs from an UCS C240 M5 through the ASA to a remote server that “telnet <DNS Name> 443” from my lapt...
Hello, I've built a reasonable large topology in GNS3 to show use of a variety of layer 2 and 3 technologies, with just a touch of ASA or enough to demonstrate ASA basics and setup of a site-to-site VPN. As a result and most importantly because I can...
I have configured IDFW (There is LDAP connection with the AD parent domain ), ASA and the users are all over the AD forest. We can query the users inside the parent domain but not at the child domains. Is there a possibility to configure LDAP with p...
While configuring an interface for a FPR2110 using FMC 6.4.0.4 I created a new security zone. While creating this zone, I mislabeled (typo) the zone. I was able to create a new zone with the correct label, but I cannot determine how to delete the i...
I have been looking at the logs on my firewall and have noticed that the source IP is not always an address on my LAN. How is it that source IP's are not on my LAN?
Hello all,I have to create a topology for VPN connection of the branches with the HQ, to access the servers. My question is: Which FW series (ASA, FRP...) to employ at the HQ and which one to the branches. Branches are small offices up to 10 employee...
emote site router ==> ipsec tunnel==> 5555x FTD / FMC (ASA headend) I see ALL event details of traffic (local and web traffic) that is crossing the ipsec tunnel in the CLI of the ASA FTD but I only see local traffic in the FMC. I do not see any 80 or...
Hi Everyone, In our environment we are frequently asked to check specifc IP addresses to confirm if sourcefire is allowing the connection or not.Need to confirm if Sourcefire DC is blocking any IP address which is the best place to check?Under conne...
Hello, I want to upgrade Firepower devices with FTD logical devices. Can FXOS be upgraded directly through Chasis Manager or entire set of FMC, FTD and FXOS need to be upgraded together. Thanks
Hi,One of my FTD 2110 (6.4.4) interfaces is interface DMZ in VLAN 333. I created subinterface 1/4.333 and configure IP (MTU 1500) , vlanid 333 subinterfaceid 333 and enabled it) I also enabled physical interface 1/4 with no IP (gave it a name and mtu...
Hi Guys, I'm trying to push ikev1 ipsec tunnel configuration to my FTD but I guet this errroE each time in deployment / FTD1-[hidden] >> info : WARNING: crypto map has incomplete entriesFMC >> tunnel-group [hidden] ipsec-attributesFMC >> ikev1 pre-sh...
Hello, I have 2 ASA in HA Setup with MultiContexts running. There are two failover groups defined. When i run show failover on the Primary Member it shows as follows: This Host : PrimaryGroup 1 : Active Group 2 : Standby Ready Other Host : SecondaryG...
Hello, I have a customer with FMC 6.4.0.1 which manages FTD. I have an issue when I click on a page in the FMC, it says "waiting for googletagmanager.com" and the page partially loads. That means some contents of the page are shown, but some others ...
