Cisco FirePOWER SFR Module Cannot Ping

KB ID 0001174  Problem On a newly deployed FirePOWER service module I wanted to test connectivity and attempted to ping a public IP address. This is what happened; > expert admin@Petes-SFR:~$ ping 8.8.8.8 ping: icmp open socket: Operation not permitted My first though was, “Well you have to set a default gateway on the SFR when you set it up, so the firewall is probably blocking ICMP”. So I checked the default policy...

Read More
Cisco Firepower Services – Change IP and DNS Addresses
Apr07

Cisco Firepower Services – Change IP and DNS Addresses

KB ID 0001173  Problem If you change your internal LAN addresses its easy to re-ip the firewall but what about the FirePOWER module? If you manage your SFR from the ASDM it will tell you what the IP is, but it won’t let you change it?   Solution Change the FirePOWER Module IP Address Log into the firewall, then open a session with the SFR module. find the physical address of the module (usually eth0, but check). Petes-ASA#...

Read More
Cisco FirePOWER – Adding a Static Route
Apr05

Cisco FirePOWER – Adding a Static Route

KB ID 0001172 Problem Routing traffic back from the ASA , in most cases you will have a static route (or routes) tied to the inside interface of the firewall. Or you may have dynamic routing if your network is a little more complex. But your FirePOWER module is essentially a small Linux box sat inside the firewall, it has its own network connection and maintains its own routing table. You may have already noticed if your FirePOWER...

Read More
MS Office – Cannot Add Trusted Location
Mar31

MS Office – Cannot Add Trusted Location

KB ID 0001171 Problem I was doing a Domain/Exchange/RDS migration for a client this week. He had some Macros that he used for printing. Now Macros are something I know very little about. So I had made it clear, if he had problems with them, I would not be the best person to ask. So when the call came in, that they were having problems with Macros I cringed! As it turned out, the problem wasn’t the Macros at all, it was the...

Read More
Mac OSX – GNS3 Connecting To the Internet
Mar26

Mac OSX – GNS3 Connecting To the Internet

KB ID 0001170  Problem I have a love hate relationship with GNS3, I appreciate it’s brilliant, (when it works). I also appreciate that it’s free, and people put a lot of effort into its development for very little reward. But when I try to do simple things, like connect my projects/labs to the internet and it’s massively overcomplicated I get pretty exasperated. With Windows this is easy, (I’ve probably blogged...

Read More