Hello Guys, Our customer have a pair with 2110, which are going to replace a pair of 5508-X.The vesion of the code and configuration of the new firewalls should remain the same, that's why I've downgraded the asa image on the firepower with cisco-asa...
Forum Posts
Hi, we have ZBF running on an IOS 15.4. It is logging dropped packets to a syslog server.We can't seem to log passed packets as there is some traffic we are interested in.We've tried auit-trail and alert on but still not seeing anything of interest.A...
Resolved! ISE PIC License Install Issue
Hi, I am having issue with ISE PIC Standard licensing and getting bellow error when importing. Invalid License, cannot install ISE PIC license or ISE PIC UPGRADE license on ISE. I have Product ID ISE-VM-K9. Please reply if anyone have similar issue a...
Is there a way to confirm that all the connection events from an FTD box is making it to the FMC and recorded in the DB? I'm working through the "frequent drain of connection events" on one of my 4110s and TAC advised to disable logging to ramdisk, ...
I have a ASA 5506-x v4 and im wondering if I can use the firepower management center to manager the firepower sensor on the ASA. When I go to the IP address of firepower I get this message: (I dont have a active service sontract as this is just for ...
Hi is there a way to mute an IPS email alert via correlation events for a GID/SID combo? I tried matching based on rule name, but I want an "IS NOT" option (to filter out email alerts to not send). You can filter SID, but the problem is, multiple rul...
Hi ,Currently our DC Nexus 7K's use local authentication, we want to move this to TACACS+. We have done this with our Nexus 5k's without issue. Some background , we use mgmt0 for remote OOB access via the internet, when connecting internally we conne...
HI alli deployed new virtual FTD V6.5 and do default route from inside to out side and can ping to 8.8.8.8 but cant open any web site can any one help me
Hi AllI need clarification on the following.For our Internet Access we have two firewalls in line as follows."Internet Router"---"FTD2110"---"Second FW"----"Internal-LansOn FTD our ACP policy Inbound rules "permits" specific destination IPs and ports...
Hi, i do have an ASA 5585X Cluster (clustermode) with four members and need to increase the mtu-size of the clusterlink to 1600.jumbo-frame reservation ist already configured.is the change of the mtu size disruptive or non-disruptive? can i do this c...
Hi All,As you may or may not be aware there is a limit of 10000 entry's in the "File List" specifically used for uploading SHA's.Does anyone know a way around this ?Like many people we use this a lot as we manually upload txt files with SHAs in that ...
I need to know what is the maximum fo ACE (ACL entries) into the Firepower 2100. Could someone help me?
HiI've previously had problems with 5512-Xs running ASA having an ACE limit of 100K. Is ACE a relevant limit for 5516-Xs running FTD 6.4.0.4? What about FTD 2110? I've read somewhere the limit is 200K for ASA 5516-X running ASA code but nothing speci...
Hi Team Quick question please , if I have a customer running ASAv and they want to run service reflection , is this supported , I cant find it anywhere in the config guides ? Thank you Julia
Hi,I am facing an issue with URL filtering vs IP Address filtering rules, as the title suggests. Let me elaborate more on the issue:We are using ASA with Firepower Services, managed through an FMC. The two rules at the top are the following:1. Source...
