I frequently receive logs from my ASA that indicate random IP addresses are trying to establish a VPN tunnel with it: ASA-4-713903ASA-3-713902 Possible unexpected behavior of a peer occured (e.g., loss of connectivity). Group = DefaultRAGroup, IP = x...
Forum Posts
Hello,On Firepower 9300 (2cpu, 78 cores) after migration from 7.2.5.2 to 7.2.9 i see almost all snort (Snort2) cores are very close to 100% or even there are some 10-20 minutes slots where there are exactly 100%. In such cases (100% cpu) packets are ...
Resolved! ASA Upgrade, lost ssh access
Hello,I just upgraded a cisco ASA 5506 from 9.6-9.16(4)57 and I cannot ssh into it any longer.Get an error: "server unexpectedly closed the network connection"I can access via asdm.I have ssh enabled and I have ssh allowed form only 2 machines (a loc...
Hello, After upgrading a coupple of FMCs to version 7.4.2.1, we noticed that the "Initiator Country" on the connection events page no longer show any data. We tried to manually update the GeoDB file, but we still not seeing any country information. H...
Hello, we've a few Firepower 2120 and 2110, and for snmp-monitoring, we want to activate the https access to the FXOS.on 2 2110 everything's fine, but the 2 2120 I can connect via ssh but not https:the https port is correct and enabledthe fabric-inte...
as i know in fmc-ftd application control or filtering in policy is work for user --> application however does it work for server<---application. in short my source will be xyz public application and destination is my private server in this scenario f...
We are planning to move the Cisco FMC server from the CentOS KVM server to the Ubuntu 22.04 KVM server. Does anyone have any document for same. Additionally what are the precaution need to take to address this
Dear all,how can I change the chassis name on FirePower-1120?firepower-1120 /system* # set name FirePower-1120Warning: System name modification changes FC zone name and redeploys them non-disruptivelyfirepower-1120 /system* # commit-bufferError: comm...
We are in the process of setting up a Hybrid Cloud/ On-prem Exchange environment. We can successfully connect over port 443, but when we try to send emails over port 25 we are getting a SSL Block. We are using the Decrypt - Known Key rule set up usin...
HiWould having static routes on an ASA with the same IP but with a different subnet mask present any issues?For example:192.168.0.0/16192.168.2.0/24From what I understand it wouldn't present an issue because although they may have the same IP, the su...
Running FMC 6.2.3.3 with multiple domains with FTD 2100. Added network objects which are visible when scrolling through the object pages. But are not seen when using the search filter and entering the ip address or name. Nor are the new objects sh...
I have Firepower Management Center (FMC) 2600 managing Cisco Firepower 4150 (which will be end of life by August 2025) and my employer has purchased the Firepower 3140 as the replacement. I talked to Cisco sales a few months ago and they said the mi...
We recently upgraded our FMC to version 7.4.2 and then 7.4.2.1, and I noticed in the release notes that they have added an IP Package Download option under the GeoLocation Updates tab in Content Updates. In the release notes for 7.4.2, they mention ...
hello I am working on an ISE v2.7 to v3.2 upgrade /migration I have staged a VM with a v3.2 build I am trying to understand the timing of the handover for example if I restore the production configuration & install the certs from v2.7 to the v3...
