Network Security

Remote card closed command session. Press any key to continue. Firepower hardware module console not accessible

Hello, I am facing a problem in configuring the firepower hardware module on a cisco ASA 5585-X. When I try to access the sfr module console I enter the default login and password (admin/Sourcefire) then I am asked for a new password and confirming i...

Confused with QoS on ASA

Hi, We have a 100MB internet line which is managed by our ISP and is heavily used. It's part of an HSRP, but the standby line is only 30MB. The 2 routers go into a stack of Cisco switches (1 router in each). The ASAs (active/standby) go into the s...

Sensor - Discovery from the device is in progress

Team, I am trying to add pair of Cisco FTD 2110 to FMC in HA. One is successfully added but the other FTD is stuck in "Discovery from the device is in progress" for approximately 1h 58Min. I have Cisco FMC 1000 in HA running 6.2.3 version. I am not a...

In vFTD, br1 mac address when set to Network Adapter-1... changes to it's original value with vFTD reboot, then vFTD becomes inaccessible from FMC.

Issue: During Image Install step of Software Image Upgrade Process, the FMC issues reboot to vFTD... and vFTD thereby becomes inaccessible due to br1 mac address changing to it's original value: The vFTD is created in vSphere1. After VM is create...

How to resolve false positive - legitimate traffic being blocked?

App owner complained of blocked traffic. I verified firewall rule was correct and traffic was allowed. I then searched Intrusion events and found that the traffic in question is being dropped by "NETBIOS DCERPC possible wmi remote process launch" ...

firepower FTD 6.2.2 hairpin

Hi There We are running FTD 6.2.2 and wondering how we go about allowing access to a webserver in the DMZ using the public ip address which is natted from the FTD device. Outside - 59.23.x.x DMZ 172.16.100.x Inside 192.168.17.x We have a webserver ...

Site to Site VPN through another Cisco 5516

Need some guidance on adding a Cisco 5505 FW to create a site-to-site VPN across an already in place Cisco 5516. Adding a VPN = Home Site A (Cisco 5505) > (Existing Firewall) > Client Site B (Cisco 5505) Existing FW = Cisco 5516 Need to allow some se...

upgrading asa 5510 to 9.1(2)

Hi, Have 2, 5510 ASA firewalls i need to upgrade. one firewall is at 7.2(3), and the other is at 8.2(5). Was reading release notes, and the upgrade path says i have to first upgrade to 8.4(5), and do not see 8.4(5) available for download. How can i ...

Cisco ASA 5506-X Firepower Device Manager

How do you change the https port number in Firepower Device Manager This is a Standalone ASA 5506-xCisco Fire Linux OS v6.2.2 (build 11)Cisco ASA5506-X Threat Defense v6.2.2 (build 81)

Resolved! CISCO ASA migration from 5510 to 5525x

Hi, I would like to migrate ASA-5510 version 8.4 (7) to ASA 5525X- version 9.7.2. If someone could please help me with the steps to follow that would be a great help. Existing config has VPN, HA and NAT as well. ThanksJP

5505 as DHCP server for hosts connecting to a WiFi access point

From guidelines and limitations on configuring DHCP: DHCP clients must be directly connected to the ASA and cannot send requests through another relay agent or a router.If I want to connect a number of hosts through a WiFi access point, is this acces...

Resolved! Help Setting or Troubleshooting the Default Gateway on FTD

I've got 20+ Cisco 5506s deployed with the FirePower Threat Defense (FTD) 6.2.2.1 code. They are all managed by a single FMC server. When I go into Devices > Device Management, several show up as green/online, but I'm not able to ping them from my...

Cisco asa 5516 Firepower -unregistered

Hi We have a FW with FTD 6.2.3.6 that is not connected to internet on MGMT interface. Since we drop the 90 days evaluation period, no it says unregistered and all new deploy of objects and policies can't be done Could you help? IS it possible...

Advice on setting up an ASA5506-x

Hi, My current setup is that I have a 2960S switch which links to a 897VA on a trunk link, the 897VA is setup with 6 vlans for various networks. The 897VA is also setup with ADSL connection to Plusnet via the built in VDSL controller it is also setup...