That is correct, but as I mentioned, your local Cisco team or Cisco reseller can help you get this sorted out.  Thank you for rating helpful posts! ... View more

Touche Marvin! You can indeed do regex based URL filtering in the ASA! :) Thank you for rating helpful posts! ... View more

Hello Anant- If you want to run URL Filtering on the device, you will need to complete a few steps: 1. The appliance needs to be re-imaged to run Firepower Threat Defense (FTD) instead of ASA since URL Filtering is a feature in FTD 2. You will need to obtain FTD URL Filtering License 3. You will need a way to manage FTD software. This can either be done through the on-box UI (FDM) or through a centralized management (FMC) I hope this helps! Thank you for rating helpful posts! ... View more

The ASAv can be downloaded at the following link: https://software.cisco.com/download/home/286119613/type If your cisco.com account does not have the permissions to download it, you will need to reach out to you local Cisco account team and they should be able to publish the image with the desired version for you.  Thank you for rating helpful posts! ... View more

The ASAv will have all of the features enabled when you deploy it without a license. However, your traffic is going to be rate-limited to 100 kbps.  Thank you for rating helpful posts! ... View more

Hi Marvin, how are you? Support for SNMP management in the FPR-2100 through the Device Management Interface is coming in 6.6.0 and it will be available via the Platform Settings in FMC and FlexConfig in FDM.  Thank you for rating helpful posts! ... View more

Apologies for the delayed reply as it took a bit of time to track this down. Please try this: 1. Use the eo_tool to re-enable the admin role (Steps provided from the other thread). However, make sure that you "save" the changes before exiting the eo_tool: ?UserRole> save After you save, go back and edit the file and confirm that the changes were save and the admin role is re-enabled 2. After the admin role is re-enabled, you will need to update some data and permissions. For this you can use a perl script. E.g: #!/usr/bin/perl use FlyLoader; use Data::Dumper; my $uuid = "bee2eb18-e129-11df-a04a-42c66f0a3b36"; warn "Refreshing All User Permissions..."; SF::Permission::refreshAllUserPermissions(); warn "Updating Policies With User Role..."; SF::AuthConfigObject::updatePoliciesWithUserRole($uuid); warn "CSM notifyRoleEO..."; SF::CSMAgent::notifyRoleEO($uuid,'update'); 3. After you run the script, restart mojo: pmtool restartbyid mojo 4. Reboot the FMC 5. You should be able to login to your UI I hope this helps! Thank you for rating helpful posts!   ... View more

Yes, each product (Endpoints, Firepower, E-Mail Security, Web Security, Etc.) is licensed separately when it comes to AMP. Thank you for rating helpful posts! ... View more

Hi there! 1) I am not aware if such table exists. However, the release notes for every version should call out the required ROMMON image 2) Yes, it is recommended that you run the latest ROMMON release Here is an example with the release notes for 6.3.0: https://www.cisco.com/c/en/us/td/docs/security/firepower/630/relnotes/firepower-release-notes-630/compatibility.html I hope this helps! Thank you for rating helpful posts! ... View more

Hi there- If you provide me with the info below I can test this on my end and try to provide feedback: 1. Detailed steps from start to finish  2. The exact use case that is being tested here and the reasons behind it.  Thank you for rating helpful posts! ... View more

I am sorry but this is not possible/supported. You will have to use a different transfer method (ASDM file transfer, SCP) or use a password that does not contain the @ symbol. Thank you for rating helpful posts! ... View more

Hi there- There is a lot of information to process here and this can't probably be fully answered without a true whiteboard/design session. Nevertheless, a couple of things to mention: 1. You can apply different ACLs for different "directions" of an interface. That way you can have an outbound ACL on your "inside" interface that can provide the desired filtering for traffic that is exiting from the "inside" of your network. Same would apply for the DMZ and Outside interface 2. Using the same security level on several interfaces is totally fine. For instance, you can have several DMZ interfaces that have the same security level. Security levels are just a simple way for you to filter traffic between trusted and untrusted interfaces without the need of much configuration.  3. By default, traffic between two interfaces with the same security level is denied. If you want to permit this, you can either use an ACL or a global configuration command: same-security-traffic permit inter-interface 4. If you want to communication between hosts connected to the same interface then you can use the global command: same-security-traffic permit intra-interface I hope this helps! Thank you for rating helpful posts! ... View more