Hi all, I´m really trying to find out, what is possible in regards to the management options with a FTD Device managed by Firepower. We know the basic and simple options using the management interface. The physical management Interface is shared with...
There are differences in supported firepower functionality for series 2 and 3 devices. Is there a clear view of what devices are series 2 and what devices are series 3 ?
Hello Community,I'm trying to configure FTDv in transparent mode but I'm encountering an issue. The initial configuration is okay but when connecting hosts (one connect to inside VMnic and the other to outside VMnic) they exchange with each other wit...
Hi, I would like to know if Cisco Firepower supports the command/ or equivalent ip forward-protocol udp 4011? Thanks
Anyone run into issues with FTD, in what appears to be random cases the application detection engine doesn't classify a flow with AVC application protocol / client information? I have seen it on SYSLOG, NTP, NetBIOS-ssn (SMB [TCP 445]), and other app...
We are wondering,if it would be possible to use for example 5506x in transparent mode and connect it between two switches. Then it should control the ip traffic in all vlans. With Sophos UTM I know, this works (you even do not have to have IP address...
Hello community! I investigated problem with rapid overruns growth on inside interfaces on my ASA5505 and havent more ideas. Interface Ethernet0/1 "", is up, line protocol is upHardware is 88E6095, BW 100 Mbps, DLY 100 usecAuto-Duplex(Full-duplex), ...
Hello Community members, I need your help with a requirement that we have.We have IPSEC Tunnels established, as below:IPSEC Tunnel established between Site1 (Austria) & site2 (Sydney)IPSEC Tunnel established between Site2 (Sydney) & Customer (Perth)T...
What is the difference between Trust rule in the ACP, versus a Prefilter Rule with FastPath?
We have a client that has 2 ASA 5516-X, one they want as an IDS only (inline) and the other as their Firewall. The firewall will be the gateway for their VLANs. The topology is as follows: Endpoint ---L2 Switch (multiple VLANs) ---- ASA (Intrusion...
Hello, I have configured Firepower Management Center with the 2019-06-30 snort version file. I am trying to generate an alert when I type "nslookup 8800.org" on my laptop. Right now, it is not generating alert for the same. I tried to look for the "B...
Hi Everyone, Can anyone help with sizing the Cisco ASA 5500X? Total number of user will be 150. Total ISP bandwidth will be 50Mbps.Services used will be - URL Filtering, Application Control, AMP, IPSEC, IPS/IDS. If anyone has sizing document, do shar...
PCI scan came back that aggressive mode needs to be disabled on ASA. I am looking through forums and researching, I am seeing conflicting information on this. The command to disable aggressive mode is crypto ikev1 am-disable. But this is where it is ...
Question regarding throughput with AVS and IPS inspection in a multi instance setup. As far as I can tell, enabling multi instance basically cuts your throughput in half when deploying rules with IPS policy inspection enabled. Running iPerf tests th...
I have both SNMP v1 and v2c enabled on my asa Output given below:asa1/admin# sh snmp-server groupgroupname : xxxxx security model:v1readview : def_read_view writeview : <no writeview specified> notifyview: def_notify_viewrow status: activegroupname :...
