About brettp

brettp · 03-30-2023

Am I missing something? Is there really no way to enable/disable specific rules in an Access Control Policy with FDM like with FMC or on the ASA. I have searched online and can not find anything. How is that even possible? I'm finding FDM is almost v...

brettp · 03-14-2023

Hello, I am trying to figure out the behavior of something but having some difficulty getting a conclusive answer. We have 4 ports connecting two Catalyst switches connected via an LACP etherchannel. Yesterday, someone mistakenly misconfigured one of...

brettp · 02-15-2023

I have a theoretical question that I should be able to definitively answer myself, but pitifully, I can't say that I can... though I do have an idea on it. I was hoping someone here has the answer.On a Cisco ASA/FTD, without specifying both source an...

brettp · 01-30-2023

Hello,I understand that in Access Control rules on the FTD, there are "block" and "block with reset" actions, but how does one configure Snort / IPS to send a RST if it's dropping something (traffic that was set to "allow" in the ACP?) Furthermore, i...

brettp · 12-12-2022

Hello, I'm still getting used to the FTD and have been for the better part of this year. Unfortunately, I have suffered so many things that TAC could not help with because they're in all probability bugs (some of which, very clearly bugs.) I already ...

brettp · 03-15-2023

Yes, very true. Unfortunately, Packet Tracer isn't the best option to gauge correct behavior as I've seen plenty of weird things with it. I guess at this time it's sort of a mystery as to why this happened. It's a bit disconcerting that one side may ...

brettp · 03-14-2023

Hmm, very interesting. Why would the other side still think the link is up? You got me curious so I just created a similar scenario in Packet Tracer. Two switches connected with 4 trunks bundled together. I changed one of the interfaces to an access ...

brettp · 02-21-2023

Thank you. It's very interesting that it works -- but of course when the initiator is outside as I suspected. I guess it means translations are aware of connections (or at least current translations are aware of both the source and destination.) I co...

brettp · 02-20-2023

Thank you for your reply, though I'm still uncertain if it would work correctly in the real world as it does not seem like it would to me... but I don't know!

brettp · 02-02-2023

Thank you both for the information. Wow, that is interesting that a RST can not be sent if something is dropped due to intrusion rules. Correct me if I am wrong, but with the File & Malware Policy, I can only block filetypes with the Threat license. ...

Member Since	‎06-26-2006 08:58 AM
Date Last Visited	‎04-06-2023 09:46 AM
Posts	113
Total Helpful Votes Received	21

User Statistics

User Activity

FDM disable/enable Access Control Policy Rules

LACP one link failure behavior

FTD NAT theory question - same real IP / service - different mapped IP

Cisco FTD send RST when dropped by Snort / IPS

Cisco FTD - "No Rules Active" but active

Re: LACP one link failure behavior

Re: LACP one link failure behavior

Re: FTD NAT theory question - same real IP / service - different mappe

Re: FTD NAT theory question - same real IP / service - different mappe

Re: Cisco FTD send RST when dropped by Snort / IPS