Hello,I want to import an ACL policy from one FMC to another FMC, both FMC has different ACL Policy but for some DR Testing we need to import policy from one FMC to another.. The process i believe is :1) go into First FMC - Sytem- Tools - Export - AC...
Forum Posts
Hi, I'm struggling to pass initial configuration for Firepower Service. I get into the wizard as soon as I log into sfr module that asks for IP Address, Subnet, GW, dns etc. After providing all those info it tries to initialize and eventually fails w...
Resolved! Firepower 2100 HA vs Clustering
Hello, I'm trying to understand the difference between HA and clustering. I see in the datasheet 2 lines different https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/data_sheet-c78-736661.html#ModelOverview But I read in a cisc...
Hello. I am looking at an issue for someone that's got me a little baffled. They have an ASA5550 with Firepower. They are having trouble reaching a certain site. You go to the url and it redirects you to the right location. The redirect should go to ...
HI I have 2 public IPs coming over a single circuit terminating in a firewall (Cisco ASA 5525) One is for a SIP trunk and one is for Internet connectivity. I am wondering how to configure the firewall interface to use both Public IPs on the single in...
Dear All, i am using the ASA 5585x with SSP-20, but I found the max conn value only 1000000.it is unmatched with datasheet 2000000. this ASA is forming failover, no any firepower. do you guys have any ideas? ASA5585# sh resource usageResource Curren...
Microsoft released several security bulletins yesterday (15-May-2019). is there Firepower IPS signatures to protect my systems if the systems are not updated with these patches?
Dear Experts if i am not wrong in Cisco we have a below vpn IPSEC vpn ( point to point)DMVPNEZVPNAnyConnect VPN for remote users I have a 13 sites including 12 sites, on 12 small sites they have ADSL connection and in HO they have static ( my guess) ...
Resolved! QoS for a group of VoIP Polycom phones
Hi everyone,I am using ASA 5506-X for a small office. I would like to set up QoS for a group of VoIP Polycom phones by using their MAC address? I am not familiar with 5506-X, in the past, I used Sonicwall and what I did is create MAC Address Object f...
I am in the process of migrating to a new internet connection. Today, the ASA terminates the internet circuit in G0/0. The new internet connection terminates on a separate router. Interface G0/0 description Internet Interface nameif outside ip addr...
Resolved! ASA5506 drops some files in passive FTP
Hi everyone, Very strange issue with FTP inspection on Cisco ASA5506-X (9.8(2)20). Passive mode works fine, BUT not for all files...For example (look at screenshot), user can download any file (txt) except this one 34313622.210. As you can see...
The FirePOWER module on ISA3K was working fine, but the upgrade to 6.2 from the FMC failed. I then followed the process of installing a fresh sfr module image on the ISA itself (with the sw-module module sfr recover configure image disk0:/<file> and ...
Hi,I have deployed FMCv 6.3 in Amazon web services, configured the initial settings like password change, DNS, Domain, EULA agreement and applied the changes. I Created an AMI with these settings. When I launch the AMI as instance in amazon ec2, it f...
Resolved! asa5520 error messages
Hican I get advice about error log:%ASA-6-303014: Teardown TCP connection 100668898 for outside:999.999.999.99/47336 to inside: 888.888.888.88/1531 duration 1:00:00 bytes 5240 TCP Reset-O%ASA-6-302014: Teardown TCP connection 47476333 for outside:999...
