Hi all - has anybody tried to use the new web update-url for ddns introduced in 9.15.1?How I can make it work with dnsomatic.com?My config is:ddns update method dnsomatic_web web update-url https://username:password@updates.dnsomatic.com/nic/update?...
Trying to get a port forward setup for a server behind the firewall and having an issue getting it to work. The traffic appears to be dropping after touching the outside interface, even though an outside ACL is created for this traffic. Here are the ...
Hello, Wants to deployed MX105 at core level and FTD at perimeter level in our network. However i have procure utm licenses for MX appliances, not for FTD. 1. Can i achieve the url filtering at FTD after it gets filter from MX. 2. Wants to achieve lo...
Hello, Im trying to configure rate filter in Firepower Snort3 according to this reference: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/snort3-inspectors/snort-3-inspector-reference/rate-filter-inspector.html For single rate filter ...
Hi there,We have two FMC in HA and we need to register a new FTD in a remote branch. We will configure NAT for port 8305 for the remote FTD to reach the primary FMC. According to this knowledge article here, it mentions that a second tunnel towards t...
What is the proper procedure to restore Cisco Secure Firewall Threat Defense configuration that was in HA? I tried using the GUI to Backup and Restore but it doesn't seem to work. Am I suppose to login to both units using GUI and backup each configur...
PortVulnerability NameCve id22SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795)CVE-2023-4879522SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795)CVE-2023-4879522SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795)CVE-2023-4879522SSH ...
Running into an issue with AnyConnect and OKTA SAML with 90 second delay between authenticating and actually establishing the connection. Initial login/redirect/MFA is quick then the client shows "establishing connection.." and 90 seconds later (giv...
hi,i'm trying to configure a global ACL and reuse the same object group in a single ACL line.i got a warning saying 'config is redundant' but when i checked, it was accepted.my question is, can i ignore the warning and my ACL would still work? i don'...
We are using CISCO Firepower Management Center for VMWare with software version 6.1.0.3 (build 57) and Software Version 6.2.3.14 (build 41). During our VAPT assessment it’s been detected that this use weak cipher and TLS. I did login via web browser...
Hi All, I have came through that Snort is only compatible with sensors embedded below Cisco products, However my organisation brought IE-3300 series OT switches. Please guide me here Cisco IC3000 Industrial Compute Gateway Cisco Catalyst 9300 Serie...
Hello,Managing certificates is getting more and more a nightmare as the valid lifetime will be reduced to 47 days, especially on devices and virtual appliances that don't support any kind of automatic renewal protocol.What are the options in FMC to a...
Dear Team,The issue occurred on ASA 9.18(4).22, which is managed by CSM 4.25 SP1.Thanks,Anuradha
Hello Guys, I´m having this problem and after upgrade I will try reload device. Has anyone reloaded device before upgrade ?
Hi all,What's the general consensus about FMC's IPS recommendations? I currently run a base policy of "balanced security and connectivity".Currently, my IPS is 477 alert rules, 9512 block rules. I ran the recommendations, and it went to 1 alert rule,...
