I am managing FTD-1120s with FMCv both running v7.2.1 software. In my ACP I have a GEO rule to block all outbound traffic to China, Russia, and I few other "hotspots". When I search for events that match this rule, most of the traffic is from inte...
Forum Posts
Hi All,I am newly building trustsec in my environment,trying to add one of the switch under trustsec. Have configured Trustsec settings and COA on the ISE for the switch and added the appropriate aaa commands , radius servers and cts commands.But sti...
Hello Experts, I have a Cisco FMC with managed Device AMP 8130 Appliance with on-premises Threat Grid and Private Cloud. I got issues about the Integration part of the FMC with TG and FMC with Private Cloud and also having trouble with TG to Privat...
Hi, Does anyone know if we need something special on our CCO account in order to use the Secure Firewall Migration Tool? I have installed it, and as soon as I run it, it opens a browser and asks me to authenticate. Afterwards, I got a message saying...
Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It ment...
Hello all, We have ISE with DNA Center merged. We have a requirement to limit/control the number of users that are allowed to login to DNAC at anyone time. Most Cisco devices can control this but is there a way to do this via ISE RADIUS/TACACS+? I ca...
(FP)Firepower 1000 has routed sub-interfaces as shown in diagram. HostA is able to ping HostB, and vice-versa. FP Vlan20 responds to ping request from HostA. FP Vlan30 responds to ping request from HostB. All works with the following exception, FP Vl...
Resolved! ASA 5506 SSP Version?
Hello,With the older ASA 5505, 5510, 5520, etc. series devices, you could add an SSP module that would give you IDS/IPS functionality. This functionality showed up in the ASDM GUI as an additional tab.The newer ASA 5506-X doesn't have a slot for a m...
How to prioritise local firewall rules when global rules are also configured in Cisco ASA firewalls managed in CSMA way for local rules to get checked first when global rules are also configured in Cisco ASA firewalls managed in CSMWith rule inherita...
Hi All,I have one customer and want to have a tech refresh migration to the hardware with some modification to the current design.Current devices:Two 2600 FMC in HA with version 7.2.5Four standalone FTD 4100 version 7.2.5New hardwareTwo 4600 FMC in H...
Hi I hope your doing well in our network infrastructure where we have Qualys to scan for vulnerabilities i can't find a solution for this certain vulnerability here are the details :Weak SSL/TLS Key Exchange impact an attacker with access to suffici...
I have a pair of ASAs that I try to add a backup ISP. I would be creating sub interfaces on Gi0/0. Once I default the Gi0/0, the Outside configuration would be gone from the configure, can I do the sub interfaces. configure Gi0/0.10 with nameif Ou...
Hello allI'm receiving hundreds of warning messages i am getting in our syslog from our Cisco ASA 5516-x. The warning message are on below same as screenshots and dunt know how to act with these kind of massages as its huge numbers of massages coming...
Hello. My CSLU can't log on into Cisco, but I can log on other Cisco web pages using same ID. Plus, I can log on CSLU & CSSM web page well using my private Cisco ID. Only my company ID can't log on into Cisco using CSLU Program. Can you give me some ...
Hi guys, I have two 5506 boxes running 9.8.3 patch 29. I login first time with ASDM and perform whatever tasks.I left ASDM open and move to other windows (probably a browser); after couple minutes a pop up from ASDM login credetials shows up. Obvious...
