Does anyone have any resources showing some good Policy examples for FTD (all the policies not just one)? We have had a FMC system running 4 FTD sensors for over a year now and we are struggling to get any real value from them. I don't know what we...
I read the instruction below, just want to confirm if that's true and required that I need to disable REST API before upgrading the SFR module? https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/firepower-fmc.html#id_53912 I m...
Hello community ! I am trying to build an IPSEC tunnel with a remote site using ASA Firepower, latest IOS installed. Additionally, I need to configure a track object with ICMP echo checks sent to the inside of the remote far-end in order to check t...
Hi all, I got a Cisco ASA 5520 with a VPN Plus license. This firewallIt had a 64MB memory card. I have to switch to a memory cardof 128MB. How do I transfer a license to this new card?
Good Afternoon, We have been working tirelessly trying to find a solution to this and i have now lost the will with it. I have a Cisco ASA 5510 which i have configured for our inside border controllers (Not Cisco) to an external suppliers border ...
We operate FMC with FTD 4140s, running 6.2.3.3. I have a URL object group that has grown too large to maintain in the "Objects" tab. (540 entries). My intention is to convert this to a URL Feed from an internal webserver, Then use the feed in poli...
So I configured Active-Active failover on my 5545 ASA's, and everything looks great other than 1 small thing - users cannot save passwords on their clients anymore. I "ticked" that in ASDM before, which is an equivalent to setting "password-storage e...
if i have 2 4150 appliances and I want High availability Do i buy for TMC subscriptions for both firewalls? as i read if you only buy for one, you smart account will be Out Of Compliance, does this mean the fail over wont work? as the info i have rea...
Dear All, I am using URL filter by regex on my ASA 5525 version 9.2(2)4 but it's not working. The domains are not blocked. Please find in attachment the config I used
In a bit of a pickle here. I have a 3D8120 running SourceFire v5.4 that's about five hours away in a lights-out datacenter with only a serial connection to a Raritan concentrator. When I try to boot into System Restore, I get a few rows of .'s and ...
Hello Does any of you have problems with installation af firepower / sourcefire 6.0.0? I have a test 5506-x firewall and I intended to use it for som firepower testing. However I do have a lot of issues with installation of version 6.0.0. It is possi...
My access control policy has all traffic set to allow, and is then forwarded to my intrusion policy. My intrusion policy is NOT set to drop. Running show asp drop command on my 4110 FTD shows that almost all of the drops are coming from snort-drop. W...
Hello I blocked port 80 through our Cisco ASA to a particular IP but am still seeing connections being permitted in the logs. The only configuration for the IP is a NAT statement mapping it to an internal IP. Any ideas why? Thanks A
I am currently working on a POC to achieve Authentication and Authorisation for remote access VPN on ASA firewalls whereby RSA server and AD user account is used for authentication, and the LDAP - Security Group (SG) member check is used for authoris...
I have an FMC where multiple clients are being managed. I updated policy (Blocked some IPs) for one client and when trying to deploy the policy, the task gets stuck for a good 20-30 minutes and then I get the error "Deployment failed due to configura...
