Hi Everyone. I've been trying to setup a simple network which has 1 firewall, 1 switch and 2 PCs. Please see the attachment for the topology. My goal is that I want my PCs can ping 8.8.8.8 of the 'internet' switch (from my attachment). But for now,...
Greetings all, Want to ask the community if any native IOS-XE functionality exists to dynamically perform Geo-IP filtering on public Internet facing interfaces? Obviously you can do this with FirePower, but that is a next gen firewall that is design...
Hi, I need some help with Cisco ASA configuration. Basically I have one dummy switch used to feed my active/passive firewall. On that switch I have following configuration: ip subnet-zeroip routing!ip route 0.0.0.0 0.0.0.0 xx.xx.xx.113!vlan 101name i...
Let us assume i have a firepower sfr model running with older version5.3.X, now I want to upgrade that module to 6.2.xNow the question is, can i shutdown sfr and uninstall the existing version and upgrade the latest version ?Or I have to follow the u...
Hello, I attempted to migrate anyconnect from ASA to FTD. We currently authenticate users using certificates only. The certs are issue to domain machine via our internal PKI. I exported the pkcs for the public cert and enrolled in FMC and that worke...
I'm looking for documentation on configuring the IPS features on a firepower 2120 running ASA code. Any help would be greatly appreciated!
We have a few sites in out environment all connected with site to site tunnels on our ASA's all using VTI routed ipsec tunnels. This is all using BGP on the back end for routing. This has been working great. We are adding a second ISP at office A. Th...
Hello, I am using a FirePower 2110 and created a new admin account (myadmin) besides the pre-defined admin account (admin). I was able to login using both admin accounts; the pre-defied (admin) and the new one I created (myadmin). To follow our ISO...
Hello, We purchased several FirewPower 2100s but not using the FTD; however, we are only using the hosted ASA. I was trying to create sub-interfaces on the ASA and was able to. The ASA's config show the sub-interfaces. I spent hours just trying to...
Hi, I'm using a Cisco ASA 5545x in Multi Context mode. I have a license and use Cisco AMP and thought of moving to FTD, but I've reliased that FTD dosen't support multi context. Is multi context on it's way? or is multi instance similar? many thanks,...
Hi, Is it good practice to enable IPS on the core router to inspect internal traffic?Please mention bad impacts to normal traffic.On the edge firewall IPS is enabled. Thanks
Hi, I have a task to swap-out two ASA single-mode firewalls. They are in a pair and neither has failed, this is merely a hardware upgrade. I am tempted to failover i.e. enter "no failover active" and replace the Primary unit first. However if I left...
Hi, I am having a weird issue where traceroutes show the second response on windows and the second & third on *nix as a * but only for the first hop. I don't know how to explain it or what might be causing it. Pings to the same hosts are continu...
Few customers are trying to access a website, FP displays some attempts as blocked and some as allowed. And when it allows the site, it doesn't categorise it. What exactly does this mean? I don't think it's actually allowing the site. Please check ...
We currently have one ISP with a basic setup (inside, outside, DMZ, etc). We have a /27 setup with a few static IPs that are natted and all of the clients are dynamically natted. What we'd like to do is add a second provider for internet for the c...
