Activity in Security
query on ASDM access
We have FTD devices with ASA image in production which managed by FMC and Also we are managing firewall through ASDM. so now we are removing the FMC from production and want to manage the FTD devices locally. so is there any impact if the firewall is...
Trouble with ASAv anyconnect radius login
Hi EveryoneI'm using a trial version of ASAv and i believe it has full functionality but is limited in 100kbps. I'm trying to set up remote access anyconnect vpn which authenticates to our NPS radius server. As you can see in the radius debug, it see...
Snort3 not recognising SMTP/S but Snort2 did/does !?
I'm in the process of updating all our FTD's from Snort2 to Snort3 & almost everything appears to work, except SMTP/S email.Under Snort2 it shows in event logs as SMTP/S Client traffic type correctly, but when Snort3 is enabled, it does not recognise...
Query regarding BGP convergence on FTD HA pair
Hi, I'm looking at deploying BGP on an FTD Active/Standby HA pair (FTDs are 4215 hardware running 7.2) to enable routes to be controlled by neighbouring routers rather than relying on 100s of static routes on the FTDs. I was wondering if anyone could...
Created a Route Based IPSEC Tunnel on Cisco FTD 2140
I have a Cisco FTD 2140 Secure Firewall that I am trying to build a route based IPSEC tunnel using VTI's. The vendor needs my proxy ID or encryption domain to be presented as a public IP address. So my WAN IP is obviously public but my internal netwo...
FMC cert expiration notification and catalyst jobs stuck "in progress"
Hello, we recently had our cert for our VPN expire without notification via alert message. I've done some research in the FMC but can't find anything that monitors certificate expiration dates. A google search points toward REST API's of course but t...
Possible? ASA 9.x run AAA with Cert and AAA only on same interface
Is it possible to run Radius with Cert and Radius only on the same interface. I have different profiles for the two. but they share the same tcp port. Need to do a POC, and it would be much easier to have user login with just Radius, not Radius and c...
SlowProcessor unable to calculate hash using handle
We're having trouble running Office 365, is there application blocking where files can't be opened, is there any fix or policy enforcement to get it back up and running? Logs: (22455125, +0 ms) Jan 03 14:46:13 [7440]: ERROR: Event::SlowProcessor unab...
ISE DNS health check showing warning
Hi all,I have a four new standalone nodes which will be going into a cluster, I am seeing two nodes have a DNS warning. All nodes are located in the same caI can ping both DNS servers .21 and .22 and nslookup up works to resolve its own IPWhy are two...
Resolved! connetion events in FMC
Hi Dears,in our company we have FMC\FTD but the logs (connection event) were saved for almost 1 week back only.i have been checked the limitation as the below tableConnection eventsSecurity Intelligence events50 million (FMC Virtual, FMC750) 100 mill...
FTD 3100 AAA in Chassis mode
HiHow do we configure AAA for the FTD in chassis mode managed via FMC?I can't seem to find any information on this? The FXOS cli doesn't appear to permit you to make any changes.But i don't see anywhere to create a Chassis AAA policy. AAA for the Ins...
Cisco ISE 3.2.0.542 External Identity Store Cert Auth via Proxy
We have implemented 802.1x with machine certificate authentication.The certificate validation is via OCSP and the question is does Cisco ISE support connection to OSCP via a Web Proxy? The assumption is that the connection would be using the system p...
need to block exe file
Hi All, Need to block below exe file path on server. Can anyone help me how can i do this in Cisco secure endpoint console. c:\program files\uvnc bvba\UltraVNC\winvnc.exe
Resolved! ISE GUI showing cannot reach page and refused to connect
Hi all,I have deployed 4 ISE nodesAll are reachable by SSH and ping. But one of them is stating refused to connect when going to the GUI via https...Why are three responding differently?
How to capture dropped packet in ftd firewalll
Hellocould you please share the solution for showing dropped packet from internet to inside lan ? i have FTD 4100 series managed by fmc I want to see output from cli or fmc related to nat transactions packet(dropped and passed) both.
| User | Helpful Count |
|---|---|
| 45 | |
| 42 | |
| 35 | |
| 21 | |
| 19 |
