We have one client that cannot connect to our IPSEC VPN, but has no problem connecting to SSL VPN.The other difference is IPSEC VPN is configured with DAP, while SSL VPN is not.No other hosts are experiencing the issue.The problem host does not get p...
Forum Posts
Hi all,I am currently dealing with a FTD 1010 on version 7.6.4 managed by cdFMC via its external data interface. My issue is, the management0 logical interface is kicking up a fuss because its not receiving any packets but this is to be expected as w...
Hi everyone,I'm experiencing a UI/UX issue with the Cisco Secure Firewall Management Center (FMC). Version: 10.0.0 (build 141) Model: FMC for VMwareWhen viewing or editing the Access Control List (ACL) rules, the modal window/container is extremely s...
Hi, Need to transfer or migrate ips configuration of Ftd 2130 running os version 7.0.4 to Ftd 3120 running os version 7.6.2. How can i achieve it
Hi, I would like to know how vFMCs are registered for support contract. Is there a serial number option? I read in an older post that vFMCs do not have serial number. Not sure if this still true! thanks
Hi, We have our virtual FMC setup and licensed with smart server licensing. However the serial no. of the virtual FMC is reflected as none. is that normal ?
I know that Phase-1 tunnel is bi-directional, but what that means?? And why Phase2 tunnel is said to be unidirectional??I get it that in the show commands for ipsec sa it shows inbound sas and outbound sas, so inbound sas for one peer will be seen as...
I'm working on migrating ASA to and FTD device that's registered on an FMC virtual appliance. When I go to select devices, I'm curious to know the meanings of the data that appear after the hostname and management IP such as NA and (R)
Hello cisco community members,I have an issue with 2 Cisco FP2130 firewalls. One is active and the other is standby, as expected. The problem is that the standby unit frequently shows 100% CPU usage, which would normally be expected on the active uni...
Hello, I have a location that comes in via a VPN. We are moving this Site-to-Site VPN connection to a 5gb link. The prior engineer created NATs to allow comms. They created many of them linking a large amount of traffic to these NATs. Now I have ...
I have a Cisco FTD1120 managed by an FMC, we are trying to get Rapid7 Vulineribility Scans to work, however it fails with SSH Credential as "incomplete". We have tried numerous accounts with admin privilage, as well as using the local admin account....
Welcome to the Cisco Community Ask Me Anything conversation. Submit your questions from Wednesday, March 4, 2026 through Wednesday, March18 2026. Our Experts Ike Chon, Scott Nishimura, Annya Martinez Foster, Jyhan Ocana Casillas, Eder Pacheco, Willi...
Resolved! ASA & DMZ
Hello everyone, this is my first experience with ASA in GNS3. My PC3 from outside cannot communicate with the DMZ. What should I change? Thanks in advance********************ASA Version 9.8(3)!interface GigabitEthernet0/0 nameif outside security-leve...
Cisco FTD 9300 chassis with SM56 modules: Unable to copy the upgradable image to Cisco FTD upgrade location /ngfw/var/sf/updates:I followed the below step-A user was created and the shell was changed to /bin/bash to allow uploading the file to /ngfw/...
Hi All,I've read several threads on this but none seem to be exactly what I'm seeing, or at least I don't understand it that way.I'm on FMC/FTD 10.0.0 and trying to set up access to an SFTP server in the DMZ. I can ping the server from outside and ge...
