Currently have an FTD setup and managed by an FMC with a publicly signed certificate assigned and in use for remote access users with a SAML integration. That is working without any issues. I now wanted to add a 2nd connection method for some mobil...
Forum Posts
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
We need to use data interface for manager access with Cisco FTDs in high availability. In our scenario, the FTDs in HA at remote site need to be get registered with FMC in HO. As we don't have dedicated management network, we need to use the Outside ...
What are the steps to update the OS version of Asa Firepower from the existing version to the recommended one, and what is the current recommended version? If the version gap is too far from the existing one, do I have to do several steps or can I ju...
Hi experts ,we have FMC managing our FTD's and version is 7.5 Recently few users had some issues connecting via the VPN while they are working from home, and i was struggling to troubleshoot the issue from FMC as haven't used FMC much in recent year...
Hi community,since we switched our FTD from Snort 2 to Snort 3, some clients can no longer open websites. Chrome and Edge show ERR_CONNECTION_RESET. The traffic of these clients is not decrypted (they match a "Do Not Decrypt" rule), but the problem p...
Dear all, I have read many cases similar to mine but I have not found the definitive answer.I have a pair of Cisco Secure Firewall 220s (release 10.0.1.0) that will form a HA pair in a branch site, these will be managed remotely by the FMC (release 1...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
i have two new FTD that should be in HA. how to onboard FTD in HA in Cisco defence orchestrator(CDO). I have two management IPs that should be provided to these FTDs. but these IPs default gateways will be in the same FTD. does it work like that? do ...
Hello everyone, We are running into on an issue on our FMC and FTDs.Both currently run the 7.6.4 version. The issue is that the FMC is showing one of the interfaces on the Active firewall as DOWN. CLI confirms the same, that the interface is currentl...
When accessing a Firepower 4225 running ASA from a Windows 11 (Enterprise) workstation, after approx 20-30 minutes the window starts to lag. It eventually becomes unusable because of how laggy it is (ultimately forcing a close through task manager be...
Resolved! RAVPN hardening on Cisco Secure firewall
Hi, we have a Cisco Secure Firewall that has an RAVPN setupThe authentication uses LDAP which has an LDAPAttribute where users must be in a VPN security group in AD. This is confirmed working. However, AD Accounts are getting disabled and we think it...
Hi everyone,I’m working with small local service businesses that use WordPress websites, and I’m trying to better understand what a sensible security setup looks like when the business doesn’t have a dedicated IT or security team.A typical site might...
Resolved! Issues With Cisco Security Cloud app
The documentation of the Cisco Security Cloud Splunk app and the issues I am facing with this app is quite shocking. Firstly, no documentation on how to migrate from deprecated Splunk Estreamer addon to this new "app"After I installed the app, I keep...
Resolved! ASA: Logging for Session Mismatches
Outbound traffic from a PC to the server is allowed by the firewall without any issues,but return traffic from the server is subject to source NAT along the way, preventing communication.If outbound traffic bypasses NAT but return traffic is NATed, t...
