Hi all,I have two network object groups as follows:inside_group_A with hosts ranging from 172.16.10.10 to 172.16.10.15 (configured with Static NAT for services such as Mail and Web).inside_group_B with hosts ranging from 172.16.10.20 to 172.16.10.30 ...
Forum Posts
Morning,I am having an issue with our Fastpath rules, hoping for some advice:I have added our scanning IP ranges in to Network Objects and then created a prefilter policy to fastpath traffic from or to these addresses.I'm unsure why but we are still ...
Hello, I have installed cisco FPR 1150 managed by FMC. i enabled allow ICMP protocol through Platform Policy, i can not ping my outside interface from outside network. Does anybody have same problem. Version is 7.2.4 Thnaks.
Hi All,I currently have a single FMC and ~ 20 FTDs in a production deployment. I'm preparing to add a second FMC in HA and wanted to check if this would result in any downtime or impact to the live FTDs during FMC HA establishment. From what I unders...
ftp copy of cisco asa image failing with permission denied error even when the credentials are right
Hi, I am seeing this error ASAv-1(config)# copy test.xml ftp://user:Cisco!23@<server_ip>/<user_folder_name>/test.xml Source filename [test.xml]? Address or name of remote host [10.86.89.125]? Destination username [user]? Destination password [Cisc...
Can someone help me with python scripts to export access control policy and objects to CSV format. I tried the below script but it is giving me error. My FMC version is 7.4.2 GitHub - mapp-john/fmc-api Thanks and Regards Shabeeb
I have an ASA at a remote location that connects back to the DC through VPN. I use a loopback interface on the ASA for remote management and I've also configured that loopback to talk to our syslog server in the DC. However the syslog is only getting...
Hi to all , running software version (FMC) 7.4.2-172 and FTD 7.2.8.How can i differentiate and use as external DHCP server , for example DHCP-SERVER-1 for some vlans and for some other vlans to use as DHCP server the DHCP-SERVER-2?I have added both ...
Resolved! AAA Authentication
Hello,I have radius group called ADRADIUS for centralize SSH login using Active Directory user.Anyone know whay different between two command below? What different between WORD and default after login syntax?aaa authentication login ADRADIUS local gr...
I'm trying to connect my asa with ftd device to FMC, but Without success, All certificates, settings, ntp server, in order, without nat
Hi all,I’m working on integrating Cisco Firepower Management Center (FMC) with Microsoft Sentinel. We’ve set up a VM to pull logs from FMC and send them to Sentinel, but we're hitting a connection error that says:The server is shutting down.There has...
We have recently installed CSSM On-Prem to manage our increasing Smart Licensing needs. I was able to add one of our Firewalls (Cisco ASA 5555-X with FirePOWER) successfully. It is running ASA code and is managed using FMC.The other firewall is Cisco...
No i can't use the FMT, no I am not a python coder.It appears there is nothing out there in github or cisco world that will do this that I have found searching with google and ddg.Github has many fmc/fp scripts, none that can take a file and create o...
To use the tool, you need an FMC with the device you want to migrate to registered to. Right? Otherwise, how will it get to the device. To register it, you need an IP, which is on the management interface, or converged mode. So, why is it when going...
Hi,I have read a few times recently about the limitations when setting up firewalls in Active/Active but they are always older posts. Can anyone confirm the current limitations with Active/Active or even Active/Standby?We have a multi-context firewal...
