I have an ASA on which I'm trying to use PBR to route to one of two ISPs which I'll call "slow" and "fast." The interface to the slow ISP is connected to a subnet on which the next-hop address is clearly in the subnet and it would count as "directly ...
Forum Posts
I am managing FTD-1120s with FMCv both running v7.2.1 software. In my ACP I have a GEO rule to block all outbound traffic to China, Russia, and I few other "hotspots". When I search for events that match this rule, most of the traffic is from inte...
Hello everyone, I have the following issue:The customer would like to disable FMC packet fragmentation globally. According to the Cisco documentation it is quite straightforward.Source chapter: Fragment SettingsCisco Secure Firewall Management Center...
Hi All,I am newly building trustsec in my environment,trying to add one of the switch under trustsec. Have configured Trustsec settings and COA on the ISE for the switch and added the appropriate aaa commands , radius servers and cts commands.But sti...
I was looking at deploying a 3120 in multi instance mode with 4 instances but I would want each instance in a different FMC domain for different teams to manage independently. Is this possible? The only examples of multi instance I've seen put the in...
Resolved! FDM DHCP Relay
HelloWe have Cisco 1140 with FDM Management, version is 7.2.5. How do I need to configure DHCP Relay? Because I did all configuration, but int not working
Hello Experts, I have a Cisco FMC with managed Device AMP 8130 Appliance with on-premises Threat Grid and Private Cloud. I got issues about the Integration part of the FMC with TG and FMC with Private Cloud and also having trouble with TG to Privat...
Hi, Does anyone know if we need something special on our CCO account in order to use the Secure Firewall Migration Tool? I have installed it, and as soon as I run it, it opens a browser and asks me to authenticate. Afterwards, I got a message saying...
Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It ment...
(FP)Firepower 1000 has routed sub-interfaces as shown in diagram. HostA is able to ping HostB, and vice-versa. FP Vlan20 responds to ping request from HostA. FP Vlan30 responds to ping request from HostB. All works with the following exception, FP Vl...
Resolved! ASA 5506 SSP Version?
Hello,With the older ASA 5505, 5510, 5520, etc. series devices, you could add an SSP module that would give you IDS/IPS functionality. This functionality showed up in the ASDM GUI as an additional tab.The newer ASA 5506-X doesn't have a slot for a m...
How to prioritise local firewall rules when global rules are also configured in Cisco ASA firewalls managed in CSMA way for local rules to get checked first when global rules are also configured in Cisco ASA firewalls managed in CSMWith rule inherita...
Hi All,I have one customer and want to have a tech refresh migration to the hardware with some modification to the current design.Current devices:Two 2600 FMC in HA with version 7.2.5Four standalone FTD 4100 version 7.2.5New hardwareTwo 4600 FMC in H...
Hi I hope your doing well in our network infrastructure where we have Qualys to scan for vulnerabilities i can't find a solution for this certain vulnerability here are the details :Weak SSL/TLS Key Exchange impact an attacker with access to suffici...
I have a pair of ASAs that I try to add a backup ISP. I would be creating sub interfaces on Gi0/0. Once I default the Gi0/0, the Outside configuration would be gone from the configure, can I do the sub interfaces. configure Gi0/0.10 with nameif Ou...
