Hi, I hope somebody here can help me. In our company we use Firepower 2120 Firewall with Cisco feeds only (i.e. Cisco-Intelligence-Feed, Cisco-TID-Feed and Cisco-DNS-and-URL-Intelligence-Feed). My personal sites (see below) get blocked with URL Categ...
Forum Posts
Hello, I have a customer that has ASA with firepower services. In the summary board of FMC he sees in the "Top Web App Seen" less traffic than he sees in ASA.Also, in the Analysis->Users the users shown are fewer than the actual users in the network...
Resolved! Standby ASA RMA step-by-step
Hello I have a question regarding the RMA process of a standby unit in a ASA cluster. Here are the steps that I have concluded, please correct/add where im wrong: Configure hostname ,Install/Verify boot image and asdm is same as primary.Activate with...
Hello experts,I'm interested to know if on the Cisco ASA there is a way to view the IKE encryption keys. More specifically, I want to do a packet capture in GNS3 (consider this a whitehat experiment) and decrypt IKE_Auth packets which are encrypted w...
Hi I am unable to deploy to Cisco vFTD 6.3.2 or v6.3.0 from Cisco FMC v6.4.0 and I get this error message ... Cisco FMC errorWhen I login to the FTD , The domains.conf file is absent .. I have passed this onto Cisco TAC but no progress ..
Hello everybody, I have a Firepower 2110 (Rel. 6.4.0.4) that has several DMZ-interfaces. There is a special box (IP: 172.17.80.40/24) where just a default gateway(172.17.80.254) can be configured, that is a DMZ-interface1. This box needs totransfer t...
Hi All, What is the difference between virtual mac that we define in HA using two different methods?1 ) Using "failover mac address .. " command2) And under interface using mac-address command. Thanks in advance.
Resolved! Apply a new license ASA 5506-X
Hi everyone, I have a ASA 5506-X with a Base License with this features: Licensed features for this platform:Maximum Physical Interfaces : Unlimited perpetualMaximum VLANs : 5 perpetualInside Hosts : Unlimited perpetualFailover : Disabled perpetualEn...
Hi I need to translate old NAT statements to New statements and wanna verify if my statements are correct and what needs to be done to verify if all good :Old:global (outside) 1 interfacenat (outside) 0 access-list MGT-NAT-EXEMPTnat (inside) 0 access...
FirePower 2110 v 6.2.3.4Snort Update ran at 2:00At 2:15 System initiated a DeploymentDeployment has been running for 6Hrs and no new deployments can be run
I have cisco ASA 5510. I want to know if I can configure two or multiple ip address on the same interface at a time or not.The scenario is like this:I have 5 public IP addresses : 45.X.X.0/29 There are 4 physical interface: e0/0, e0/1, e0/2 and e0/3....
Resolved! Reg: ASA inside to outside config
Dear All, I've the ASA device with the following config and the problem to config the inside traffic to outside traffic communication. Kindly share the solution for this. Note: The device with bgp config. ping from firewall to 10.101.174.178...
I saw that CDO will be a future release for some of the 4100 NGFWs. is CDO supported on the Cisco 4115?
HiWe have a situation with an ASA where there is a PAT set up for connections from the inside interface to the outside (mpls, not the Internet). There are certain connections initiated from a remote site that come in on the outside interface to a re...
Hi all,I can't seem to find a good intrusion rule to detect DNSCAT2 tunneling traffic. I've set up a working DNSCAT2 tunnel, and copied all DNS traffic with a SPAN port to a passive interface on our FTD.Then created a dedicated rule with application ...
