Todd Lammle Official Blog
Cisco Released Firepower 6.5 Code with New Intuitive Interface
Cisco has released a new code for their Firepower devices and the first thing you’ll notice is how they updated the login page, which is a nice change from the legacy. Be forewarned that the new 6.5 code uses a new hardened password and it cannot be recovered, so be careful here! Next, you will […]
Cisco’s New 1600/2600/4600 FMC’s….Just how different are they?
So… I’m writing my new Cisco CCNP Security Firepower book and just finished my Cisco FMC chapter….in that chapter I create a table outlining the difference between a 1000/2500/4500 and 1600/2600/4600…finding the answer to this question was not easy at all. So just how different are they? The answer is surprising little… Let’s take a […]
Cisco Firepower FMC Quarterly Cleanups. Do this!
When I’m working at a customer I try and setup as much task management by going to System>Tools>Scheduling, and using all the Add Task programs I can. I have to assume that about a week after I leave they will stop logging in and providing the advanced network analysis that I taught them (just like […]
How to Fix a Stuck Cisco Firepower/FTD Deployment
Did you ever deploy on your Cisco Firepower/FTD environment and then see something like this? First, understand that this does not mean your deployment failed, but instead the actual task is done but notification has never been cleared for some reason. First we’ll log into the FMC and move to root. Now we use the OmniQuery.pl […]
Best Free & Public DNS Servers (Valid June 2019)
Need to find or figure out the latest and greatest DNS servers? The best free public DNS servers include Google, Quad9, OpenDNS, Cloudflare, CleanBrowsing, Verisign, Alternate DNS, and AdGuard DNS. Here is a brand new shiny list of the best public DNS servers:
Cisco Announces New Firepower Threat Defense (FTD) Devices & Modules at Cisco Live!
The long awaited replacement for the 5506 model is finally here and is called the Firepower 1010, and can now be found on their web site. This model has been sorely needed. There are a few other versions above this model- the 1120 and 1140, probably meant to replace the 5508 and 5516 Also, Cisco […]
R1.3 of the Cisco ASA to FTD Migration tool is out and it’s a Winner!
Here are some of the new features added to this release: IPv6 support Flexibility to clear CSM Inline grouping Selective Migration for NAT and routes (Do not migrate option) REST API for programmability 6.4 version support Support for new hardware (1000 series) Version 1.3 The Migration Tool allows you to connect to an ASA using […]
RDP Error 0x609: Cisco Releases New Snort Update 5/24/19; Brings down RDP access with Error 0x609. Here is how to fix this…
A whole bunch of RDP users starting losing connections with RDP Error 0x609 when traversing Cisco Firepower Snort because of an update that was sent out by Cisco Talos. Here is how to fix this without disabling your entire IPS inspection. First, here is the update that caused this issue: let’s take a look at […]
Yet Another Awesome Undocumented Hidden Feature in the new Cisco Firepower 6.4 code!
Okay, so in my last couple blogs I mentioned some undocumented or hidden “features” in the new code. Here is a reminder of the two I already mentioned: If you blacklist an IP address, the address is immediately blacklisted and all communication stops. However, in the past, if you wanted to remove the IP address […]
Cisco Firepower FastPath, Blacklist & White list. What does that have to do with the Dreaded Pirate Roberts from Princess Bride?
The Todd Lammle Cisco Firepower TidBit provides cool features of Cisco Firepower/FTD in just a couple minutes! Cisco’s Firepower/FTD FastPath, Blacklist & White list. What does that have to do with the Dreaded Pirate Roberts from Princess Bride? Watch move Tidbit Of the Day (TOD) to find out!
How, Why & When you would use a pass rule in a Cisco Firepower Intrusion policy (IPS)
This TidBit of the day will provide cool features of Cisco Firepower/FTD in just a couple minutes! So I received this questions from a reader: What is the best easy way to exempt a host or network from a specific snort signature/rule? I want to prevent traffic from being dropped if the source IP is […]
How to find a hidden graph that shows your Cisco Firepower IPS “Would have Dropped” events
This Tidbit of the Day will provide cool features of Cisco Firepower/FTD in just a couple minutes! In this Tidbit of the Day (TOD), I will show you how to find a hidden feature in the Dashboard>Overview in order to se your IPS “Would have Dropped” events
Which IPS Rules does Cisco Enabled on your Firepower System? Think you know? Part II
In the late 1990’s Dale Carnegie wrote what would become one of the most famous and popular business books ever to be written: “How to Win Friends & Influence People”. I am pretty sure that Cisco Talos has Fed Ex’d me a copy by now… In one of my current blog posts titled (4/13/19): “Which IPS […]
Is Cisco Firepower/FTD 6.4 code ready for production?
This is a follow up blog from my initial writeup on the release of Cisco Firepower/FTD 6.4 code release. I mention in that blog that I had class that week and was going to thoroughly test the new 6.4 code, and then write a new blog on my recommendations, so here we are. To cut […]
The Quiet Release of the New Cisco Firepower/FTD 6.4 Code
The new Cisco Firepower 6.4 code has some great features. Something for Cisco to be proud of, and I’ll list a few of the top ones in this short article. However, it seemed to me that this release had less fanfare than say the “make it or break it code of 6.2.3”, or the “powerful […]
Can Law Enforcement use Cisco devices to spy on you? Yes they can!
Are Law Enforcement Agencies using your equipment to spy on you or others without you even knowing? Possibly! Lawful intercept is a process that enables a Law Enforcement Agency (LEA) to perform electronic surveillance on an individual (a target) as authorized by a judicial or administrative order. Congress requires that service providers (SPs) and Internet […]
Which IPS Rules does Cisco Enable on your Firepower System? Think you know? You’re probably wrong!
So, think you know what IPS rules are enabled on your Firepower system, and do you feel comfortable with Cisco’s defaults and sleep well at night? This blog may just start keeping you up at night! A couple weeks ago I was training/consulting at a very large school district outside of Columbus, Ohio. They have […]
Cisco Firepower Threat Defense (FTD) devices are expensive! Which one should you get?
This post goes hand-in-hand with my FMC blog Cisco FTD devices are expensive!…and they are announcing new more expensive one’s next week…here are the current as of right now: Cisco’s 2100, 4100 and 9300 FTD Devices So which one of these expensive FTD devices do you need? Did you know it’s actually pretty easy to […]
Cisco Firepower Management Centers (FMCs) are expensive! Which one should you get?
In all my travels, I go to a whole heck of lot of customers with various Firepower gear and different FMC’s. What I have found is that most of my customers have either been oversold or undersold on the processing/storage/memory for their hardware FMC. To the sales persons defense, finding the right FMC for a […]