Welcome to the Cisco Community Ask Me Anything conversation. Submit your questions from Wednesday, March 4, 2026 through Wednesday, March18 2026. Our Experts Ike Chon, Scott Nishimura, Annya Martinez Foster, Jyhan Ocana Casillas, Eder Pacheco, Willi...
Forum Posts
Resolved! Help implementing FMC with AD and ISE
HelloI aim to implement FMC by utilising:1) Active Directory for creating Access Control rules based on AD Groups2) ISE as an Identity sourceI intend user's login ID should be visible in the all logs, also I do not want to use User agent as an Identi...
I'm in the process of setting up a management console (MC) in AWS to manage a bunch of PCoIP clients in our office. The networking between our AWS private cloud and our on-prem infrastructure is sound because everything else works. The MC virtual ins...
ASA version 9.7(1)21ASDM version 7.12(1) Has anyone run into an issue with the latest build of AnyConnect where it's being removed from flash? We've just had to roll back to an earlier version.
OK, I am new to Firewalls so excuse my ignorance. I am trying to perform the following scenario and need help.Scenario:Company A - 172.16.200.0/24Company B - 10.30.0.0/16I login to the VPN for Company A and I try to RDP to a file directory on Company...
Resolved! ASA 5515x Password Recovery issue
Hi our ASA 5515x password expired due to password Expiry limitation and unfortunately no service password-recovery command is enabled. is there any way we can recover password ? with or without losing existing configuration when we login on ASA it ...
Trying to understand better when I should use object NAT vs Manual. Which is the better way to configure NAT, Manual vs Auto/Object NAT, for internal servers that need to be reached from the Outside?
Is there a way to send a notification to an email or something like that when "logging host management" and/or syslog or audit server goes down?Also, what it the actual logging server number for just when the server is unreachable or however it detec...
Hello, when I issued a packet-tracer from my antispam to Internet on SMTP dest port, I see this results : Phase: 12Type: SNORTSubtype:Result: DROPConfig:Additional Information:Snort Trace:Packet: TCP, SYN, seq 811220630AppID: service unknown (0), a...
Hi,Can anyone advise what are the commands for ASA 5500-X to manually remove a unit from cluster and then rejoin it?I'm thinking of removing a member during an upgrade so it doesn't impact the traffic. Thanks
I have a webserver on a DMZ. Webserver should be accessed from public internet as well as from internal networks.They access the server with http://www.url.com and both internal users and external gets the same IP from the DNS servers. Lets say: 85.1...
Dear, I have a connection problem in my network, I currently have a cisco handle that is configured through port-channel to my core, this cisco asa has sub-interfaces that vlan segments, between different segments I have no problems, but in the conne...
Resolved! SNMP Configuration on FMC
Hello, I would like to ask how could I configure SNMP in FMC for the firepower devices(2110). As I searched there are 3 places with SNMP configurations. 1) System>Configuration (It is used for the FMC to be polled)2) Devices>Platform Settings>Polic...
Does anyone know if it is possible to view live data from a specific client IP, or more specifically, the ports the firewall is blocking from that client? A client has a piece of hardware that’s trying to connect on some obscure port but the installe...
HiI have a problem when I execute the policy deployment in order to load the configuration changes. Yesterday I followed the procedure about the bug CSCvg58754 (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg58754/?referring_site=bugquickviewredi...
hi. we configured firepower that scan new detected ip host using nmap. it works as expected. but when firepower scans host it is shown on event and Initiator User seems to be netadmin. Shouldn't it only depict Unknown for Initiator user? How we could...
