Hi All, I'm currently writing a migration document to move from SOPHOS UTM to Firepower and i'm getting a little confused with Firepower NAT.Lets say i want to configure what i used to call a "masquerading" rule (NAT Overload or PAT)I create a Dynami...
So if you currently have an IPSEC tunnel allowing 10.10.10.10 to remote host 20.20.20.20 and need to allow more hosts to access 20.20.20.20.Would natting lets say the additional hosts you want allow let's say 50.50.50.50 from Inside interface to 10.1...
Sometimes I only get data on Egress interface.I use let's say 10.10.10.10 as source host to 20.20.20.20 destination on both the Ingress and Egress parts of the Packet-Capture filter in the ASDM.I will only get data captured on Egress interface. Known...
Hi, do you somebody know, how I can monitor FTD all CPU load? I know, that FTD has 2 level CPU (LINA and SNORT). I need monitor CPU load HW appliance. If snort is high load, this not mean, that FW is overloaded. Thank you for your advise.Tomas
On the ASAs (8.x) when i creare a crypto map it automagically adds:set security-association lifetime kilobytes 4608000I have been able to change the number of kilobytes but have not been able to remove this setting entirely for tunnels where we do no...
I have a wan router(70.70.70.129) from where I need to access a syslog server on inside with its real ip address(192.168.1.192). I have setup an access list on outside int:access-list outside_acl extended permit udp host 70.70.70.129 host 192.168.1.1...
Hello, I am trying to setup site to site VPN with NAT ip address inside. I can ping through to the absolute destination but cannot ping through to the NAT ip address. VPN Tun inside NA...
Hello, We have a Cisco ASA 5516 that we use for public networking. We have a single IP on the outside interface and IP a /22 block on the inside interface. The need has come up to privately IP something behind the firewall. So i have added an IP to...
Good Evening, I have an ASA 5516-X running the traditional ASA image which is working fine at the moment however I would like to replace it with FTD. I've got another ASA 5516-X which is running the latest FTD image, we are managing this locally thro...
Hi , I have ASA 5516-x with Firepower services and on FMC i have this error message: Memory Usage - Memory Test Used 13016.10MB of 13512.55MB (Physical + Swap) I have also notice that scheduled backup is not running because of low memory. Could n...
Hi All,In our company we are trying to Introduce a new ASA5516-x series with firepower to our existing network, the plan is only to keep this device in transparent mode and use this only of AMP and IPS inspection,we have done configuring this device ...
Hello, today we got new FMC 4500 devices. we tried to configure initial setup but it doesn't show anything. we followed the Cisco document. can anyone help me with this? Thanks Harish
Hi there, I'm new to Cisco Firepower. We are in process to migrate from Cisco ASA 5510 to Cisco Firepower 2130. We are going to use FDM and not FMC. My Question/Query: What is the best way to implement URL Filtering!! Should I configure URL filtering...
As we know, an ACL can get really long especially when it comes to blocking malicious sites or IPs. Would it be better to block via a IPs sensor/device? If so, what are the main reasons why?
Hi guysI have a requirement to separate 5 VRFs into nexus VDCs.While each VDC will host the relevant VRF and terminated on the Firepower FTD.In regards to the Cluster Control Link, Since the firepower will have specific interfaces into different zone...
