Hi All, I want to setup CBAC as my basis for firewall rules / filtering on a home lab. High level description of the setup is as follows (diagram attached): ISP Router / Modem (SpeedTouch 780) supplied by ISP and flashed with their firmware / image, ...
Forum Posts
I have a cisco 1921 router that I can not get to port forward/allow access to my internal webserver. SSH is open so it appears that the ISP or modem isn't blocking it (I could be wrong). Inside LAN works getting out to the internet. Gateway of last r...
Resolved! Configuring IP SLA Monitor
Hello, I have a Site to Site VPN, and I'm unable to get the IP SLA Monitor I setup to keep the tunnel up. I'm using Cisco FMC 6.2.2 with FTD HA Pair Cisco Firepower 2120 Threat Defense (77) Version 6.2.2.2 (Build 109) Vendor is using AWS I have ...
Resolved! Firewall in transparent Mode and LAN Primary IP is reachable but Secondary IP is not accessible.
Dear All, I have replaced my old cisco 5510 Firewall with a new 5516 NGFW. My edge router 2911 has primary and secondary IP address on a LAN connecting interface. Before replacing the old firewall, primary and secondary IP gateway addresses were reac...
Resolved! Disabling an ACL entry
Hi all I need to disable a number of access list rules on ASA version 9.7. I know I just need to add "inactive" to the end of the rule but 1. do we simply enter the rule exactly as it currently is then add inactive, ie does it recognise that we are d...
Hi All, How can I check when was the ARP table last cleared in ASA 5516 ? Thank you in advance, Tamas
Hi All, Do Firepower 2110 supported, DNS Based inbound load balancing ? Pharming ? Port Independence ?
Is there anyway to send certain logs from ASA to syslog, like to stop logging on a ACL or anything like that?
Hello,Am having issue in enabling captive portal on my asa device.Have been able to connect to the AD to download users. All i want is for the users to authenticate with the Active Directory by entering their credentials through the captive portal,An...
Resolved! FMC Default Logging and Default IPS
Hi....I have a Firepower Management Center running 4110 in FTD. We are on version 6.2.3.4 on FMC. I have about 50 Access Control Policy Rules...is there a way that I can turn on logging to the globally on all the ACP rules or do I have to go to each ...
Hello I do not support the IPS devices but have been asked to see if I can gather some info. On the FMC webpage, I have selected Intrusions->Events. I specified a date range and I have a page of events listed. If I then click VIew All button, I see...
Resolved! New Client, New Setup Help
Hello All, I have a new client that has grown beyond what their current network can provide and wanted to run what I was thinking of implementing by everyone here for some feed back and questions. What they have now is about 20 users in two offices d...
Hi. We are using FMC2500, FP8250 OS version 6.2.0.6. My customer wants Proxy setting. So I setting the FMC2500, but not setting FP8250. If I setting like this, is there nothing problem using Proxy? And why FP are setting the Proxy? As I k...
I would like to see if there is any document which has the cons of ssl inspection of firepower module. Like the effect on resource usage like memory, processing power on the firewall
Hello, Our ISP has given us Netflow access and we can see what the ISP Cisco router is sending and receiving, this is great but as a source or destination I only see our 'outside' public IP. I understand this is normal, but is there a way I can see w...
