Hi, We have an FTD Cluser with an FMC and we always get this error : "Deployment in not possible for this HA pair as both units are in unknown state. Break the HA pair after selecting the force operation and reform the HA pair"see attached file I ...
Forum Posts
Hi All Can anyone tell me with next gen firewalls, what the main differences are between IPS and Threat prevention ?
Hello :) I have a little problem on my primary CSM about backup job via the restore-from-backup script. The problem is linked at the compression of "filebackup.tar" and i think the problem comes from the file "datafile.txt" which is empty on th...
Hi All, I'm in the process of configuring an FMC intrusion policy for all of my remote sites and I have a couple of questions regarding recommendations that I cant find a solid answer to. I have a single intrusion policy and I have enabled it to ...
Resolved! ASA on FXOS chassis licensing problem
Hi, I'm trying to enable license smart, but meet some error messages. Then type show version display "Encryption-3DES-AES : Enabled ", is this really enabled? And what is "* THIS DEVICE IS NOT LICENSED WITH A VALID FEATURE TIER EN...
Hi. I have the following ASA in Transparent mode. No external access from the network, it simply to segregate the devices shown. I need to allow the 3 devices on the outside interfaces to access a server / port off the inside interface. Think I’ve go...
hi all, i created access control policy/rule on a 5506 that blocks (w/ reset) URL categories: adult, games, P2P. i initially chose the category reputation of '1 - High Risk' but it didn't work. i changed it to a 'Any' and it worked. what are the diff...
Resolved! FP-4110 with Fail-to-Wire on Supervisor
Hi team, Our customer is using the FP4110 with the following components: - 01 Supervisor: Cisco Firepower 4000 Supervisor with 8 x 10 Gigabit Ethernet ports. - 01 Network modules: 8 x 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) ...
Hello. I am quite unexperienced with ASA. Does the system require a reboot after restoring the configuration from a backup? Thank you for any information provided. Kind Regards,
Hey everybody! Has anyone of you a affected ASA-5508 with a repaired clock time issue? Perhaps you can send me the repair notifications and picutures like on 5506. Repairing 5506 is very easy but i think 5508 has another mainboard. greetings An...
Hi I'm trying to add a branch office ASA5508 (v6.2.2) with sfr FirePOWER Services Software Module, to a recently installed FMS also 6.2.2 I have end to end connectivity but unable to add this as a new device to the FMS The ASA sfr is registered wit...
Resolved! Configure FTD transparent mode from FMC: The all gigabiEthernet interface administratively down
Hi Sir: When I setup the FTD to transparent mode and setup the BVI1 interface. It will show up the Diagnostic0/0 interface and status is ok. When I try to setup BVI1 group interface(G0/0 and G0/1). I found it's status is N/G, event I enable the i...
Resolved! Multiple external IPs on ASA 5505
This is a dumbed down version of what I'm trying to do, but if I can get this much figured out I'm golden. The setup: - ASA 5505 running 9.2.4(28) - ISP has assigned block of external IPs 10.0.0.1-10.0.0.14 - ASA's outside interface can "see" traff...
Hiwe have FMC virtual machine configured with IP address in a vlan that has no access to the internet.If we change FMC ip address temporarily to another subnet that has internet connectivity then getting the smart license from Cisco, then reconfigure...
Hello guys, Could you please help me to make it clear why it is happen? So I have a Cisco ASA 5506-X with Software Version 9.8(2) in live service. The inside interface sec-level is 100 and the outside is 0. On inside there is only one rule : access...
