topic Re: FTD pre-shared key in clear text? in Network Security

FTD pre-shared key in clear text?

Chess Norris — Fri, 21 Feb 2020 16:50:22 GMT

Hi,

On the ASA we can use the more system:running-config command to view the PSK in clear text, but this command does not seam to exist on the FTD. Does anyone if there is a corresponding command in the FTD to reveal the PSKs?

Thanks

/Jörgen

Re: FTD pre-shared key in clear text?

Rahul Govindan — Wed, 20 Feb 2019 14:10:18 GMT

It exists on FTD as well. You just have to be in the diagnostic CLI to run in.

See example below:

> system support diagnostic-cli 
Attaching to Diagnostic CLI ... Press 'Ctrl+a then d' to detach.
Type help or '?' for a list of available commands.

vftd-fmc> en
Password: 

vftd-fmc# more system:running-config
: Saved

: 
: Serial Number: 9AR44A4TS41
: Hardware: ASAv, 8192 MB RAM, CPU Pentium II 2100 MHz, 1 CPU (4 cores)
: Written by enable_15 at 14:07:50.131 UTC Wed Feb 20 2019
!
NGFW Version 6.3.0 
!
hostname vftd-fmc

.

.

Re: FTD pre-shared key in clear text?

Chess Norris — Wed, 20 Feb 2019 14:15:58 GMT

Thanks. I was in the system support diagnostic-cli, but did not enter enable. Worked perfectly after that 🙂