Hi!I have around 20 local networks. Im posting a basic topology with only 4 networks. Each server represents a network.Everything internally is working fine. Nothing will be going out to the internet. This is all within house. Now there is aclient th...
Hi, I am trying to get some debugging done on my FTD via SSH, but it does not seem to work. Does FTD support debugging if done via SSH and issued under#system support diagnostic-cli || or do you have to use a console cable to see debug output? Us...
HelloI have implemented some policies on Cisco ISE but it is using default policies instead of the ones i configured.Can i please get help on it.I have attached the the image below
Hi team,We are currently running ThousandEyes POV.Since our FTD is not allowing traceroute through it, the path visualisation part is not showing the correct path. We have 2 BGP peers to SaaS with ECMP, but FTD is not allowing traceroute it looks lik...
Hello team, I have one smaller issue (at least I think that) in IPSec tunnel between ASA 5585 (9.12(4)67) and Firepower 2110 (do not know version, but it is 7.0.0+) So tunnel is up, and first phase is ok. But we get constant complains about traffic ...
Hi,We have 2 DC's, each with their own Firepower 1150 running ASA software v9.20(3)7.In DC1 we see interface Internal Data 0/0 (overrun) errors rising. After reading up on several posts here, on reddit and other places, i understand that interface is...
Hi All,I need to remove our Umbrella DNS policy from the Inspection part of a Acces Control Policy.Setting the Umbrella policy to "None", the deployment fails.I'm only able to apply a different policy, but not remove it entirely.FMC >> vpn-addr-assig...
Hi Guys I am running into some issues activating a VPN on my cisco asa 5508, when trying to add the below command: "crypto ikev2 enable outside" I get the following errors: ERROR: Failed to open "udp/localized/2/500"ERROR: Error opening IKE port 500 ...
Hello Cisco Community, We are faced with the challenge of transferring the access rule list from an existing Barracuda firewall to Cisco FMC. On the Cisco side, two FTDs are connected to the FMC. When looking into the Barracuda Firewall, I noticed th...
Hi Support,I want to implement the DMZ with dual firewalls (FW1 & FW2). FW1 is connected to Internet and FW2 is connected to LAN. Between the both firewall we have the dmz subnet 10.10.10.0/24Web Proxy (10.10.10.3), FTP(10.10.10.4) ans mail server (1...
I am trying to configure SNMPv3 polling for an HA pair of Cisco FTD 3105's running 7.4.2.1 (Build 30) but that are managed by a Cisco FMC also running 7.4.2.1 (Build 30). I understand how to go to Devices\Device Management\Platform Settings\SNMP and ...
Hello All, We are migrating from ASA+SFR to FTD. I used the migration tool and migrated the ASA policies to FMC. I was tuning the policies after migration to the FMC and have some doubts regarding the variable sets. Please find the questions below. ...
Hi all,Does anyone foresee any issues in configuring the same range of IP addresses on the management interface and one of the data interfaces?We have a complex setup here, and we believe this could ease it up a bit.Thanks,Dodzi
I am not an advanced level SSH tech but can find my way as required but for this I need assistance. I've inherited a switch stack that points to a 2008R2 NPS server to login. Please assist with the commands to change the NPS/RADIUS server it uses to ...
Hi,We're building up 2 new data centres, and the connection between them won't be ready for some time, each data centre will have a number FTDs in it, and one FMC in each data centre which will form a FMC cluster.I was thinking what's the best way to...
