I have a ISE-PIC that is configured to poll 8 Windows DCs using WMI (agentless). There are no obvious errors in the logs and live sessions screen appear to have the correct and up to date user/IP mappings for my users. However, when I check the con...
Forum Posts
Cisco must address the lack of support for RFC3021 on the Firewall FTD platform. Many ISPs use /31 to conserve IPV4 address space. The absence of this support prevents the use of a Firepower device to connect to an ISP utilizing /31 address administr...
Resolved! FTD 1010 with /31 Interface
Hi all,hope you can adviseI have my ISP giving me a /31 for my point to point link, but when inserting on the 1010 it gives me that I can't use a network as my IP address. I'm not using the FMC but the Firewall Device Manager since I only have a sing...
Is there a way to have FMCv installed in UCS or to bypass the ISO image requirement for FMCv install on a UCS ?Or do I have better chances on installing another hypervisor in the UCS?
Hello Community, i want to build a Hub-Spoke Topology with dynamic VTIs. The final design is using BGP which is working perfectly. For testing i wanted to set a static route from HUB (with dyn vti) to Spoke. But i cannot select the dyn VTIinterface i...
We recently noticed a sharp increase of brute-force activity against our Cisco 5555X Firewall, which provides our remote access VPN.I inherited this firewall, so I want to ensure we are taking advantage of all available options to harden the ASA.I se...
I tried migrating our 5555-X to a 3120 instance HA pair. For the most part, it migrated, however only ONE WAY. Our firewall is set up with inbound AND outbound ACLs and only the inbound ACL's migrated, leaving a huge load of unmigrated network object...
We have two internet providers. Trying to route all outbound Internet traffic to the second ISP but PBR is not working after applying the configuration on FP1140.After enabling the route map the device matches to the correct next ip hop as configured...
Hi All,Can somebody tell me if it’s possible to use MDNS routing for Airplay discovery. The firepower is an FPR1010 running FTD firmware. kind regards,patrick
Hi,We have a FPR-1010 with the FTD code 6.6.x code and also being managed by FDM and not FMC which has high memory since day one.I noticed since these FPRs should have 8 GB of memory but when i type show memory or show version it only shows close to ...
Hi all,I have had a failed migration attempt due to VDI access not working after the migration and have had to roll back. I took a wireshark from the client at the time.After the roll back I have ran some packet captures on the live ASA and the non l...
I just got kind of similar issue to CSCwb94312https://community.cisco.com/t5/network-security/asa-unable-to-configure-service-on-port-22/td-p/1742513orhttps://community.cisco.com/t5/cisco-software-discussions/lost-ssh-access-to-asa-after-upgrading-fr...
Hello, I'm trying to enable ssh access on the inside interface. It's not working and I get this error message Unable to configure service on port 22, on interface 'INSIDE'. This port is currently in use by another feature. I did a show asp table sock...
FMCv - 7.4.2I made a change to my Global-ACP which should affect all managed devices, but when I try to deploy through the GUI, no systems are available.Is there a way to force a deploy from the GUI or CLI?-Thanks
Hello,I have this 3 interfaces on the ASA and want to config two vpns. Users should be possibleto connect from inside to mgadm and from outside to mgadm, but i can't get it work bothdirection at the same time. I need the NAT exemption for outside->mg...
