FirePOWER Agent – Real-Time Status ‘Unavailable’
Jul02

FirePOWER Agent – Real-Time Status ‘Unavailable’

KB ID 0001323 Dtd 01/07/17 Problem I was deploying a Cisco FirePOWER user agent last week, but once setup, the agent reported that the Real-Time status for SOME of the domain controllers was permanently¬†‘Unavailable’. Now I know you have to be patient with these things so I went and had a coffee. Still it refused to ‘go green’. Solution I addition to all the other rights and firewall rules that you normally...

Read More
Cisco FirePOWER is Blocking an Application
Feb27

Cisco FirePOWER is Blocking an Application

KB ID 0001286 Dtd 27/02/17 Problem A few weeks ago I installed a 5525-X firewall for a client, and set it up as follows; ASA Setup FirePOWER Services (for ASDM) And all was well, then a week later I got an email… One of our teachers is doing a project with MATHS and ICT involving bitcoin. Basically, he has something called BITCOIN CORE WALLET installed and it used to work with the old Firewall. I‚Äôve installed it on my work...

Read More
Deploy Cisco FirePOWER Management Center (Appliance)
Nov30

Deploy Cisco FirePOWER Management Center (Appliance)

KB ID 0001263 Dtd 30/11/16 Problem You have been able to manage your firewalls Internal SFR module for ¬†while using the ASDM Setup FirePOWER Services (for ASDM) For most people that’s fine, but if you have a lot of FirePOWER devices to manage that does not scale well. In those cases you should use theFMC ¬†(FirePOWER Management Center). Here ‘Im going to use the Vmware virtual appliance, (at time of writing there is no...

Read More
Cisco SFR Session – Cannot Exit To Command Line
Nov22

Cisco SFR Session – Cannot Exit To Command Line

KB ID 0001259 Dtd 22/11/16 Problem This tripped me up once before, and I didn’t document it! Normally if you have a console session open with your FirePOWER Module, (that you opened with a ‘session sfr‘ command), then you can just quit, and exit back to the firewall by typing ‘exit‘, like so; ciscoasa# session sfr Opening command session with module sfr. Connected to module sfr. Escape character sequence...

Read More
Cisco – Cannot Connect to the ASA FirePOWER Module
May10

Cisco – Cannot Connect to the ASA FirePOWER Module

KB ID 0001182¬†Dtd 10/05/16ProblemThere’s an alarming amount of people who have contacted me about this error;Cannot connect the the ASA FirePOWER module.Cannot connect the the ASA FirePOWER module.. Check that it is correctly configured and on the network. It’s also possible that the management address is being translated by NAT.Please verify¬†the IP address/Hostname and port.¬†SolutionYou see this error when YOU attempt to...

Read More
Cisco FirePOWER User Agent – Use With the FirePOWER Management Console
Apr27

Cisco FirePOWER User Agent – Use With the FirePOWER Management Console

KB ID 0001179 Dtd 27/04/16 Problem FirePOWER Management Center, will give you a wealth of information on traffic/threats etc. Usually it will tell you what IP the offenders are on, but if you want to know what a USER is doing, then that means you have to look though logs see who had what IP, at what time etc. So you can install the FirePOWER User Agent on a machine, (this can be a client machine, though I usually put it on a member...

Read More