I have imported the PKCS12 file into objects > PKI > Cert enrollmentWhen adding the cert to the device it is stating CA not available.. is this because the CA Root and Sub CA's are also required to be added to the PKI cert enrollment section?This par...
@Marvin Rhoads kindl please suggest if my approach is right as the cisco documention is overwhelming. what I read from your post replies and other this is the right process from FMC1000 migration to FMCv • 1 Deploy new FMCv in virtual environment • 2...
Hi.We have an 1120 that just blinks green in the status LED.So I've connected to the CLI via USB and can see it stops at "Creating FXOS swap file..." when booting from itself. But also if I try to boot with a new image on a USB.When I try to factory ...
In my SSL/decryption policy advanced settings I have chosen the option to block unknown cipher suites and therefore in my connection logs I see lots of connections that are blocked due to unknown cipher suites, which is expected. However, the partic...
This might be a dumb question but how would you set up the ASA firewall 1000 without internet connection? I have a switch that connects to it. I think I can console into it with putty but isnt there a gui ?
Hi All, I have a need to deploy an HA pair of ASAv in Azure. I've read the Deploy ASAv on Azure Cloud document and I understand that the ASAv is required to have interfaces in four subnets, not including the Azure GatewaySubnet. My Azure Virtual...
My understanding is that URL feeds in FirePower SI are updated dynamically and take effect w/o having to do a policy deploy to the FTD. Does the same apply to custom URL feeds used in an ACP rule? My idea would be to create a custom URL feed on a loc...
Hello, I have a firewall configured active/standy lan failover. Over the weekend there was something that happened and now the standby is active. Below i posted the failover state, for security purposes i just left out the actual ips on some. I know ...
I geoblock traffic from most countries. I have run into a few websites that my clients need access to but are located in one of the blocked countries. Is there a way to allow these websites through AND continue to block other traffic from the count...
Hello guys,So as we deploy (add) the Cisco FTD and FMC in VMware Workstation with the .ovf file, the default disk size is very less and since we can thin provision, how can I increase this size to 2 TB.Also, once I upgrade my Cisco FTD or FMC, does t...
Tring to get an on-prem virtual FMC server and Azure based Ubuntu box to operate as estreamer in CEF. Cannot get past the following error TypeError: SSLContext.wrap_socket() got an unexpected keyword argument 'keyfile' - full output below.Ubuntu 24.0...
Hello!We have a Cisco ASA running version 9.18.4.22 that we are trying to do port forwarding on. Right now an endpoint hits the outside interface ip and should forward the traffic to one of our servers that sits on the inside interface. I had set thi...
Hi,I have two questions on the behaviour of 3100 Secure firewalls in a cluster and interface health checks.We have a pair of 3100 secure firewalls (running FTD), that we have setup in a cluster, managed by FMC. All devices connected to the two FW's u...
Hello, How i can import YARA rule in Firepower Thanks,
I have a pair of FPR2130 running ASA code in HA. Everything looks configured OK to me, though obviously there's an issue somewhere! sho failover presents no errors.I need to failover to compete a firmware upgrade, however when via the primary device ...
