Security

Firepower PII/PHI Word Filter

Does Firepower have the ability to setup and filter on policies that are based on words, numbers, etc...? Not content restriction or URL filtering. But a dirty word search and filter.

Cisco FPR-1010 ASDM vpn Full Tunneling

Hi guys!I'm pretty new to Cisco routers and learning alot from configuring a Firepower 1010. At the moment I can't use CLI as the router is in another place. I would benefit from doing this through ASDM since I'm using VPN to get to the server which ...

Detect that the PC is Windows 11 in cisco ise posture

Hi how are things. I need to enable the condition in Cisco Ise 3.2 so that one of the conditions is to validate that it is Windows 11. How can I make that condition be met in posture? could you help me

Resolved! Downgrade WSA from 15.x to 14,x

Hi Fellows it it possible to downgrade a new WSA that came from factory with 15.x version , to a 14.x version? i cant found any doc with this procedure ou even a Reimage the WSA. Revert process is not considered because it is a new WSA... My SMA is ...

Upgrade FTD

Currently my FTD is running version 7.0.4, I am thinking of upgrading to Release 7.2.8, can I upgrade to 7.2.8 at once or should I do it gradually?It is a Firepower 1120 managed by FMC version 7.2.4

FPR-C9300 FXOS How to Clear Faults From Overview Screen GUI

Want to clear old faults from list presented on Overview screen in the GUI of a FPR-C9300?What are the commands from the command line? Thanks in advance.

Firepower 1000 setup

This might be a dumb question but how would you set up the ASA firewall 1000 without internet connection? I have a switch that connects to it. I think I can console into it with putty but isnt there a gui ?

Resolved! UNKNOWN Domain radius server dead

Currently have an issue when our edge switch reboots the authentication sessions on the switch come back with "UNKNOWN" domain. The AAA server is marked as "alive" but these auth session stay in an "UNKNOWN" Domain and failed Authentication .Shouldn'...

Resolved! ISE Domain Unknown

We're currently doing a tech refresh and replacing older switches with 2960s and we're having an issue with our switches displaying UKNOWN when doing the command "sh auth sess". Here's an example of the command output. The switch I use in this exampl...

Cisco FTD Anyconnect DHCP

Hello, I would like to configure for Cisco Anyconnect DHCP Address Assignment from Windows DHCP Server. I Use this Manuals (https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215854-configure-anyconnect-vpn-client-o...

Using an ASA as a router

Hello,the question is in the title. Is it possible to use the ASA as a router between 2 internal networks? interface GigabitEthernet1/1nameif outsidesecurity-level 100ip address 10.0.1.254 255.255.255.0interface GigabitEthernet1/2nameif insidesecurit...

Convert single Firepower 1120 into an HA pair

HiI have a single Firepower 1120 running ASA software which is currently in production and working fine. It has been decided to add a second 1120 and convert them into an HA pair running as active/standby for redundancy. Can anyone advise if there is...

Duo Security Authentication Proxy Microsoft Updates

Hello community,anyone else experiencing issues with Duo Security Authentication Proxy running on WS2016 after latest (09/24) patches install?On ASA debug it was shown "Unable to decipher response message" (Anyconnect)After restore of server to the v...

ASA Failover, Primary becomes secondary but stays active

I have a pair of FPR2130 running ASA code in HA. Everything looks configured OK to me, though obviously there's an issue somewhere! sho failover presents no errors.I need to failover to compete a firmware upgrade, however when via the primary device ...