I've created a new BYOL ASAv on AWS using an m4 machine type and it's having problems starting. It performs the initial boot, platform type detection etc, then restarts. However, it then hangs on the screen below. It's been like it for about 20 minut...
Recently we renewed Public CA certificate from Entrust to DigiCert for ISE system EAP Authentication, and since then, devices have been failing to authenticate via EAP-TLS. These devices obtain endpoint certificates through the BYOD portal. This is h...
Hi Team, I am stuck in one issue i would like to all please help me to resolve this issue......I have cisco FTD 3105 model with version 7.3.1, from my firewall have configured 2 tunnels for different clients but the issue is both the clients have sa...
Hello team, I want to use Firepower3120 in multi-instnace mode. I going to create a port-channel on the chassi and assign it direct to instance. The question: is it possible to create subinterfaces for VLANs on portchannel in the instance? I ask, bec...
Is there a visual hit count on FMC to show which policies are being hit? I am in Policies > Access Control > ACP1 > but no hit count is visible..
Hi,I found configuration below on my customer switch:Extended IP access list ACL-POSTURE-REDIRECT10 permit tcp any 10.0.0.1 0.255.255.0 eq wwwAnyone know what is mean of wildcard 0.255.255.0 ?Glad to hear your response!
Dears, I'am using FTD 6.6.1 managed with FMC, i Configured Internal Certificats, Trusted Certificat, add DNS target with the routed interface, configured the Identity Policy, added it to the Access Policy and allowed it.When now i go the user compute...
Dear Cisco Community, Current in my lab using ISE 3.x with SC 5.x only check Anti-Malware (CS)installed. I plan to config more posture check by enable CS check both (installed and Running). Can you share good practice and how to config it? Thanks for...
I had recently a problem with AzureAD integration with Cisco FMC 7.4.2 and it was getting integrated and was able to partially downloaded and it was giving SQL related error. to get this resolved some highly contained object groups i did excluded wit...
Hi We got the below info from Qualys for security vulnerability issue in device Nexus9300. Look like cipher need updated and ssh rsa key length needs to be changed. I reviewed the below link, but cannot find some configuration to change cipher or ssh...
hi, when ever I'm using cisco asa in eveng NOT the ASAV, most of the time the asa it is not showing any interfaces but once in a while is shows interfaces, anybody has any idea of remedy it ? Thank you.
Hi.We have an 1120 that just blinks green in the status LED.So I've connected to the CLI via USB and can see it stops at "Creating FXOS swap file..." when booting from itself. But also if I try to boot with a new image on a USB.When I try to factory ...
Hi Fellas,I have a question, regarding how the ASA with IPS module or Firepower with intrusion policy is able to check VPN traffic.The traffic is coming from a L2L tunnel and does a U turn pointing to a VTI so the traffic never pass through the devic...
Hello,we've a Cisco Firepower 2110 Threat Defense and we're going to move to M365.There's a large set of applications which I can setup in the firewall rules.Is there a best practise guide to setup our Firepower for the inbound and outbound rules? Ou...
good day, in-between TAC support renewal so can't open a case on this , so figured i'd ask of The Communityare there any add'l steps for Azure Gateway-side for traffic-flow thru FTD-based s2s ikev2 tunnel ?got the Tunnel 'up' but no traffic .... have...
