For firepower configured with Passive Interface to do Discovery, show Connection, Intrusion, File, and Malware events, do we need to configure any policies (Discovery, Access Control, Intrusion, Malware&File) similar to those needed for Inline deploy...
Forum Posts
Hi Team, I have got a request from my manager I have asked to disable the implicit "any" rule. I am using ASDM to login to Cisco ASA however whenever I highlight the implicit rule "Edit" "Delete" options are greyed out. Please help me to understand ...
Hi, I have recently implemented a new ASA5508-X replacing our old 5510. Our carrier delivers over a C2960-CG. When I connect the ASA to the C2960-CG we get extremely slow speeds in a single direction. This changes as we change the speed/duplex. ...
Hi Support, Regarding the traffic, One of my customers wants to upload 50GB data from DR Network to DC Network via port 22. There have to pass through 2 ASA Firewall. I want to know ASA Traffic how many mins or hour can keep establishing. What is the...
Resolved! FTD pre-shared key in clear text?
Hi, On the ASA we can use the more system:running-config command to view the PSK in clear text, but this command does not seam to exist on the FTD. Does anyone if there is a corresponding command in the FTD to reveal the PSKs? Thanks /Jörgen
Hello Community, I've heard from a technical Cisco staff that i must buy Cisco Firepower Management Center, (VMWare) for 25 devices (P/N: FS-VMW-SW-K9) if i need to do setup HA configuration for both 2 units of Cisco Firepower 2130 NGFW. according t...
Resolved! ASA 5510-X Load Balancing Feature
Hi there, Based on the Cisco ASA 5512 data sheet, mentioned that load balancing can be done but need to have Cisco ASA 5510 Security Plus License. Anyone can share the code item for this Security Plus License?
When you look at an access control policy in FMC and the default action has a drop down list and I have multiple things in here including system policies and user created policies. So when i choose a IPS policy it wont block traffic after the policy ...
Is there a way to configure FTD to write syslog messages for changes to the NAT table? We'd like to be able to find which device on our network did a thing based on reports sent from external sources, but we can't without having a record of which dev...
Hi How can i permit ping between two hosts on a different subinterface using the same physical interface on cisco ASA? It is also using the same ACL. FW/pri/act# sh ipSystem IP Addresses:Interface Name IP address Subnet mask Method GigabitEtherne...
Resolved! Changing interface from access to trunk
Hi All, I have my inside interface configured like this: interface GigabitEthernet1/2 nameif inside security-level 100 ip address 192.168.x.1 255.255.255.0 standby 192.168.x.3 It connects to a switch configured also with an access interface. ...
Resolved! ASA Uauth Absolute Timeout
Can somebody explain what the absolute timeout is for a user authentication? Does it mean after this specific time, you have to authenticate again?
Hello i have a problem with arp and i think the problem is this feature no sysopt noproxyarp inside Anyone know how to set off this feature in FMC? Thanks Bestregards
Dear all, I have a customer that wants to use the ASA image on two FirePower 2130 in HA mode and also use multiple contexts. Does the customer need to buy the context license for two boxes or just one? BR Andreas
Hi,how do I enable the support for TFO (RFC 7413) in Cisco Adaptive Security Appliance Software Version 9.2 ?It seems not to work out of the box, i.e. normal connection establishment (handshake without application data bytes) works well while TFO (...
