Hi,Wrote my first document on the Firewall / Documents section here at CSC.It has some basic information about the new NAT format and its operation.I am planning on later updating it and adding additional information and ofcourse correct possible mis...
Forum Posts
how to add local GUI user in FTD using FDM with admin privilege
Hello everyone, We have a new firewall cluster (active-passive) in our company, consisting of 2x Firepower 1010. A few days ago, the cluster failed for unknown reasons and did not recover on its own. Only a restart was able to resolve the problem. We...
Hi GuysSo we have an already working Site to Site VPN on our FTD, I have ran into an issue with the FTD I have added a couple of IP Addresses in the config and added an ACL allowing RDP and also used the same NAT rule as the working IPs, when I run...
Hi AllI would like to know, is it possible to create a rule whereby traffic coming in on an interface from different networks or hosts triggers them to have to authenticate via a splash screen and use our multi factor MFA which is Duo?cheers
Resolved! Secondary WAN IP Proxy ARP problem
I have Cisco Firepower with FMC and 3 ISP public IP in one subnet /24. First IP is in firewalls interface, second IP in dedicated PC, third IP I want to 1 to 1 NAT to my DMZ network IP from firewall, but ISP has IP-MAC binding and he can't see my arp...
Resolved! FTD second IP Address
I am configuring Cisco FTD 1100. Need to use three IP addresses on outside interface. Is there nay way how to do that?Thank YouJaromir
Hi team,I have captured some TCP traffic in Cisco ASA. But from that capture, I'm unable to examine the TCP handshake flow.Looks like, TCP flags are placed in random order. Is ASA capturing the traffic in sequence order?What is the flag for SYNC ACK...
I have a couple ASA5506x firewalls and one of them has something I can’t find information online about. The flash memory on the one in question shows 7,000 something MB of RAM and when I open the file management in ASDM, it shows there’s the normal D...
Resolved! Fmcv license query
Hi All, My organisation brought an fmcv license to manage 2 pair of Asa cluster. Basically i need to know with brought license I can deploy single fmcv with manage devices upto 10 or upto 10 fmcv with same count of manage devices . PFA snapshot
I'm trying to generate a usage report from FDM but the numbers are not adding up from what our ISP dashboard is reporting (not even close). Anyone knows if all internet traffic is being captured by the firewall? Here is a screenshot from the FDM r...
Hi team, Please help me on upgrading an Active/Standby ASA with multiple context. Hope you could give me detailed procedure for the upgrade. We have 8.2.5 software version and upgrading to 9.1.7. I am not well versed on multiple context. How will I ...
Resolved! Traceroute through FTD
I am trying to get traceroute to work from my internal network to the Internet through a FTD2110 managed by FMC running 6.2.3 code I created an access policy allowing ICMP type 3 and 11 from the outside to the inside. I added ICMP permit statements...
Resolved! Log Rotation For Cisco FMC
Hi, I want to check the current log rotation for my FMC & how can i change it if required. In other words i need to understand the period for which FMC is retaining logs for the logical devices. Thanks
While investigating vulnerabilities, I discovered some vulnerabilities on Cisco FTD's known as "Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1)". I'm looking for any possible soluti...
