From Firewall to Insight Engine: Unlocking the Power of FTD Connection Events It's a busy day. Your NOC is flooded with tickets: "Application X is slow." "Users can't connect." "Everything is timing out." Your dashboards show green, yet somethi...
Forum Posts
Based on my recent experience, we had to patch our FTDs from 7.6.2 to 7.6.4 for the HA environment for multiple sites. DHCP relay was not working. Solution: Had to switch the Active
Resolved! FTD PBR Question
HiCan anyone answer this question please, Do I need a default route when using PBR on FTD ? we have a static default route that points out of one Interface and have set up PBR to force traffic ingressing on a certain Interface down a tunnel, I have ...
Resolved! Deploying FMCv to VMware
I'm considering upgrading to the new FMC/FTD 10.x, so thought I would try deploying another FMCv to see what the upgrade experience was before actually doing my production instances.However, I cannot get the OVF to deploy onto vSphere 8. I've tried b...
Resolved! FPR1120 EOL
Hi, I am not able to find anything related to FPR1120 EOL and EOS, however all open source links are redirecting for 2100.Please, if someone can help me on this?
Hi!I already posted my question in Configure NetFlow in FMC - Cisco Community but I´m not sure how visible it is there, therefor this repost.So far, I´m using one Platform settings policy for all FTDs as there´s a lot of shared similar configuration....
Hello Team, We want to remove disabled rules from firewall and before that want to take backup of "disabled" rules only. is there better we can achieve this. I know you can generate report of policy from policy section of FMC too, but that includes b...
Hello, guys Could you please help me with two questions? I have installed anyconnect plus license (AC-PLS-1YR-25-S) on a hardware ASA 5512x, is it possible to move this license to ASAv in the future? if I will buy ASAv5 (L-ASAV5S-K9=) and in the futu...
I need help configuring PBR (Policy-Based Routing) on Cisco FMC/FTD in a scenario without change a exist default route and using two WAN links with ECMP.My goal is:To use PBR on the inside interface to steer traffic to two different next-hops (two IS...
I am working on deploying a new ASAv and it's only using the Management and I can't figure this out on how to use the outside interface for traffic. When I try to add a static route using an IP in the outside interface range it gives an error conflic...
Could anyone explain me the packet flow especially with those nat statements and how crypto acl is checked. Chatgpt isn't helping a lot. I do understand how twice nat works from asa1 but un-nat at asa2 is still something I couldn't get. Also how cryp...
Hello everyone i want to configure identity policy on FMC with Active Directory Kerberos, on guide written The Realm you select must be configured with an AD Join Username and AD Join Password to perform Kerberos captive portal active authentication....
Resolved! FTD BGP Question
HiIf I have a route based VPN configured on my FTD and I want to run BGP with the peer device then what IP address do I use for the peering is it the peers VTI IP or the peers interface IP address please.?? Thanks
Hi,Is it possible to create groups of SGTs to facilitate the creation of firewall rules when multiple SGTs need to be added?Regards
Hello, I am running a lab in VMware with two Cisco Firepower Threat Defense (FTDv) devices managed by Cisco Firepower Management Center (FMC). All on version 7.4.2 I created a new IKEv2 policy and IPsec proposal in FMC and deployed the changes to bot...
