HelloWe have a lot of clients getting the following error when contacting diffrent sites: ERR_SSL_PROTOCOL_ERROR, we have read that SonicWall and Palo Alto also have these problemes. Solution is to turn off "TLS 1.3 Hybridized Kyber Support" in chro...
Forum Posts
Resolved! Route Based VPN FTD
HIWe have several Policy based VPNs, I have read in a Cisco document that the sysopt permit-vpn is not supported with Route based VPN and I will need to configure access control for this, so that being said does this affect our policy based VPNs whic...
I was looking at deploying a 3120 in multi instance mode with 4 instances but I would want each instance in a different FMC domain for different teams to manage independently. Is this possible? The only examples of multi instance I've seen put the in...
Resolved! FDM DHCP Relay
HelloWe have Cisco 1140 with FDM Management, version is 7.2.5. How do I need to configure DHCP Relay? Because I did all configuration, but int not working
(FP)Firepower 1000 has routed sub-interfaces as shown in diagram. HostA is able to ping HostB, and vice-versa. FP Vlan20 responds to ping request from HostA. FP Vlan30 responds to ping request from HostB. All works with the following exception, FP Vl...
Hi All,I have one customer and want to have a tech refresh migration to the hardware with some modification to the current design.Current devices:Two 2600 FMC in HA with version 7.2.5Four standalone FTD 4100 version 7.2.5New hardwareTwo 4600 FMC in H...
Hello allI'm receiving hundreds of warning messages i am getting in our syslog from our Cisco ASA 5516-x. The warning message are on below same as screenshots and dunt know how to act with these kind of massages as its huge numbers of massages coming...
If I am configuring an IKEv1 IPSEC site-to-site VPN with an FTD device running 7.4.1 managed by the FMC and it is policy based, not route based, does the system ACL applied to the device also control the traffic across the tunnel? If so, then what Zo...
Has anyone Created statoc route on the FTD sensor via the CLI?Mine looks like it goes throught bu when i FDM into it, i do not see them. Any Advice will be appreciated.Thanks.
Hello, Does anyone know why the FMC/FTD would create an sf-storage folder on a Linux Server? When I configured the remote storage I tried to point it so that the backups are stored into a certain directory, however it created a separate folder within...
Hey allI have a Firepower 1010, I need to disable the SIP ALG on it, I have access to the Web Client and Telenet access to make changes, can someone give me an easy way to make these changes, I don't have the ASA Software that could access with.
Hello, I deployed a new FTD 2110 on our company network and I'm seeing two different mac addresses on the switch port that the MGMT interface is connected to. I know that the one mac address is associated with the actual MGMT interface, but can anyon...
Hello everybody,our customer has FMCv rel. 7.2.5.1 and two Firepower 1120 in a HA running rel. 7.2.5.I have installed the FTD patch to rel. 7.2.5.1 successfully but the release that the FMCindicates is still 7.2.5 (see attached screen dump).Do you ha...
Resolved! Cisco Firepower Malware signature
Hi there,Is Cisco Firepower have a Database for malware signature?When i check TECSEC-2599.pdf p77, the information is: FTD will first calculation the sha, and than send to FMC and FMC will check the Reputation from AMP Cloud.But i got another inform...
