Hello,I understand that in Access Control rules on the FTD, there are "block" and "block with reset" actions, but how does one configure Snort / IPS to send a RST if it's dropping something (traffic that was set to "allow" in the ACP?) Furthermore, i...
Forum Posts
I have a pair of ASA55XX series firewall and configured as active/standby configuration.I have added an add-on network adapter card on both of them and I configured the management of it. (The original management port was configured as IPS usage)I had...
Hello everyone, we are affected by this bug CSCvx89643 and there is only a workaround to fix it: whitelist the certificate on webproxy. https://bst.cisco.com/bugsearch/bug/CSCvx89643 How do we do that? Regards
When I start a configuration using the default config, all ports are up if plugged in. After the default config is finished, I make the following changes. Go into each interface (2 - remove nameif, remove bridge-group, and shutdown. After the inte...
Our FMC (7.2.2), seems to be having an issue with using proxy settings when trying to register to the SmartLicensing portal.We're able to see other .cisco.com, .sourcefire.com, traffic from this FMC traversing the proxy successfully so proxy configur...
Hi All,Anyone experienced this error upon deploying some changes on your FTD using FMC."Deployment failed due to internal errors. If problem persists after retrying, contact Cisco TAC." My initial fix is i just rebooted my FMC and so far i have not s...
Resolved! Restore point
can you create a restore point on a cisco device? ASA, FMC for example instead of backing up and saving somewhere
Resolved! MSS clamping IPSEC tunnel -ASA
Hello Community,We have a number of ipsec tunnels on our ASA 5545 running software version 9.6.We have deployed a cloud based DDOS solution using GRE tunnels for any inbound traffic ingressing into the network via the internet upstream of the ASAs. ...
Hi All Is there a way to check the Snort events/logs on the SFR or on the FMC? We need to rule out our Firepower module for a recent outage Thank you in advance
Resolved! MacSec host to host on same switch
Hi,Does Macsec support host to host encryption between hosts on the same switch?
Hi All,We are going to setup a FTD 2110 in a remote site which will have only internet connectivity. > We need to manage the FTD over Internet facing interface.(BOTH MANAGEMENT AND DATA INTERFACE IS SAME) that is the public interface.> FTD is a new b...
I have a virtual ASA and NAT is not working. Here is the config. Why does it say exhausted? ASAv is running 9.16. I have a live config on a customer network running 9.5 and it works fine. interface GigabitEthernet0/0nameif outsidesecurity-level 0ip a...
My company is replacing there ASAs with Cisco Firepower 2130s. I'm wanting to know how I can install the FMC on a virtual server for these devices. Also is there a way to send the configs from the ASA to the Firepowers? v/rD
Hello TeamI have been trying to create a test LAB where by i am trying to configure and access Firepower Module through ASDM but while connecting it loads up to 17% and then throw following messageJava version Installed in Console Laptop: JAVA 8 Upda...
Hello Community,I hope, I'm on the right Board posted.I have a firepower 1120 device configured with dual WAN. Both ISP has their MRTG for internet monitoring. I observed frequent downtime in the primary ISP. When I informed my ISP, they always repli...
