Hi Guys, I am configuring a Firepower service module using the ASDM and I am using FP 6.4 version. I noticed that I cannot change the timezone of my Firepower module using the ASDM as it is default in "New York". Do you have any workaround for this issue? Thanks ... View more

Hi Guys, I have a firewall configured in bridge mode (transparent) and it is in between of my two switches and these two switches needs to form OSPF neighbor. The two interface of my firewall is configured as trunk and I tag the VLAN per interface like eth1.100 <-> eth2.100 and eth1.200 <-> eth2.200.  What should be the configuration of the ports of my two switches connecting to the eth1 and eth2 of my firewall?  Thank you very much. ... View more

Hi Guys, I experienced a weird issue in my ASA with Firepower Services in which I am trying to change the time from local to NTP. I am just using ASDM to manage my Firepower module and based on the ASDM configuration, it is already set to the correct NTP server but when I checked the CLI when I do "show ntp" it is still in the default NTP servers which are the sourcefire public NTPs and I cannot see in the list the NTP server that I configured in my ASDM. I tried already to re-deploy the policies and restart the NTPD service but it is still the same.  One thing I noticed strange is that the configuration is different between the "Configuration > ASA Firepower Configuration > Device Management > Device > System > Default" to the "Configuration > ASA Firepower Configuration > Local > System Policy > Default" in which it should be the same. Anyone here encountered the same issue? Thanks     ... View more

Hi Guys, I am just wondering in ASA with Firepower Services about how it allocate the memory? For example, the ASA5508X have 8GB of memory as per data sheet, does it mean that the 8GB is shared between the ASA engine and the FP module? or both have their dedicated memory allocation? I got confused because when I checked the FP ASDM under the Monitoring > Firepower > Statistics, I can see memory usage and it is not the same as the "show memory" in the ASA engine. Thanks ... View more

Hi Guys, Anybody here knows the directory path in the FMC for the connection event logs so that I can download the historical logs because I noticed in the FMC GUI particularly the Connection Events section, the historical logs are not showing. Thanks ... View more

Hi Guys, I have an ASA with Firepower Services with the use of ASDM to manage it and I tried to create a custom privilege user account. When I tried to use the "admin" account, everything is okay ASDM can login to ASA and Firepower using the ASDM however, when I use the custom privilege account, only ASA is showing in the ASDM and not the Firepower.   What I did is I tried to add a user in the Firepower module using SFR console with the "basic" privilege but it gives me the error shown below,   > configure user add user1 basic Enter new password for user user1: Confirm new password for user user1: Store Failed\n at /usr/local/sf/lib/perl/5.10.1/SF/EOHandler.pm line 3880. Can't execute statement at /usr/lib/perl5/site_perl/5.10.1/Error.pm line 273 Error::subs::run_clauses('HASH(0xabf1fd0)', 'Can\'t execute statement at /usr/local/sf/lib/perl/5.10.1/SF/...', undef, 'ARRAY(0xabf1b80)') called at /usr/lib/perl5/site_perl/5.10.1/Error.pm line 390 Error::su::try('CODE(0xabf1e20)', 'HASH(0xabf1fd0)') called at /usr/local/sf/lib/perl/5.10.1/SF/EOHandler.pm line 3886 SF::EOHandler::_storeObject('HASH(0x9fd0870)', 'HASH(0xabf7920)') called at /usr/local/sf/lib/perl/5.10.1/SF/EOHandler.pm line 2027 SF::EOHler::storeObject('HASH(0x9fd0870)') called at /usr/local/sf/lib/perl/5.10.1/SF/Permission.pm line 680 SF::Permission::addUserEO('HASH(0x9c32728)') called at /usr/local/sf/bin/cli_usrmgr line 306 main::addUser('user1', 'basic') called at /usr/local/sf/bin/cli_usrmgr line 764 storeObject failed with exception: $VAR1 = bless( { '-stacktrace' => 'Can\'t execute statement at /usr/lib/perl5/site_perl/5.10.1/Error.pm line 273 Error::subs::run_clauses(\'HASH(0xabf1fd0)\', \'Can\\\'t execute statement at /usr/cal/sf/lib/perl/5.10.1/SF/...\', undef, \'ARRAY(0xabf1b80)\') called at /usr/lib/perl5/site_perl/5.10.1/Error.pm line 390 Error::subs::try(\'CODE(0xabf1e20)\', \'HASH(0xabf1fd0)\') called at /usr/local/sf/lib/perl/5.10.1/SF/EOHandler.pm line 3886 SF::EOHandler::_storeObject(\'HA(0x9fd0870)\', \'HASH(0xabf7920)\') called at /usr/local/sf/lib/perl/5.10.1/SF/EOHandler.pm line 2027 SF::EOHandler::storeObject(\'HASH(0x9fd0870)\') called at /usr/local/sf/lib/perl/5.10.1/SF/Permission.pm line 680 SF::Permission::addUserEO(\'HASH(0x9c32728)\') called at /usr/local/sf/bin/cli_usrmgr line 306 main::addUser(\'user1\', \'basic\') called at /usr/local/sf/bin/cli_usrmgr line 764 ', '-file' => '/usr/local/sf/lib/perl/5.10.1/SF/EODataHandler/User.pm', '-text' => 'Can\'t execute statement', '-line' => '413', '-package' => rror::subs' }, 'Error::Simple' ); Error storing user HASH(0x9c32728) at /usr/local/sf/lib/perl/5.10.1/SF/Permission.pm line 683.   Any ideas guys?   Thanks for the help.     ... View more

Hi Guys, I have an on-going issue with my IPSec tunnel site to site VPN, it is an ISR to FTD.   I saw multiple logs as shown below, all crypto parameters are the same for both peers.   "Username:Unknown IKEv2 Received a IKE INIT SA Request" "Username: Unknown IKEv2 Negotiation aborted due to ERROR: Failed to receive the AUTH msg before the timer expired"   This happens every morning and I need to manually turn up the tunnel by accessing in the router. What is the meaning of this log? What timer does the log is telling?   Thanks ... View more

Hi Guys, I have ASA5516X that will run in multiple context and one management VLAN. Is it possible to assign the management interface to difference context so that each context's mgmt traffic will pass through that? Thanks ... View more

Hi Guys, I am using security intelligence in my firepower system to block and white-list URLs however, it seems to be not working it still goes to the verdict of my access control list and not the security intelligence. Thanks. ... View more

Hi Guys, Just want to check with you if it is possible to block east-west traffic in FTD? Those endpoints which are within the same VLAN or network. Thanks ... View more

Hi Guys, Just to check with you, I created a QoS policy in FMC with the source interface of VLAN-A and VLAN-B with a 100 Mbps rate limit. Is the 100 Mbps shared between the VLAN-A and VLAN-B or not? Thanks ... View more