I have deployed 2 vFTD on ESXI 8, everything is fine I am also able to access GUI, but as soon as I enable data interface no ports are showing UP even I enables them. They are property mapped with dedicated port group. What might be the problem
I have a question to an issue that none of us can effectively figure out. We created and staged a few different firewall rules and tunnels this weekend, with the intent on deploying sometime later this week. At 2:08am, FMC automatically deployed th...
Hi All,
Any suggestions on this please? I am getting the below error while trying to migrate from ASA to Firepower.
FMC and SFR both running on 7.0.6 release.
Migrating device....................................Aborting model migration since identifi...
Hi All, Am planning to upgrade the FMC, After the upgrade am planning to update the SRU and VDB and push the updates to FTD. I read in notes that SRU updates may change/delete the rules. Will this have any operational impact? Also, am planning to do ...
Hello, I have FTD 2110 and anyconnect VPN. I have to renew the certificate for the VPN.I have successfully added the new cert in the below path Add Certificate Enrollment στα Objects -> PKI -> Cert Enrollment.But when go to assign the cert to the de...
Ours is a production setup. Recently we have configured Syslog on our Nexus switches. Our syslog team wants to receive filtered logs from switches itself. Please suggest if there is a way to filter Syslog messages right at the source (Nexus Switches)...
I generated a CSR from my FMC for an Audit Log Certificate. I sent that to our PKI admin and he generated a certificate. When I try to import the certificate I get the following error:ErrorUnable to identify certificate purposeAny guidance is great...
Hello,
We need to do a password recovery on a FPR2100 running ASA software in platform. Vi can access the ASA via CLI/ASDM, but not the chassis manager.
According to this documentation - Recover Password for Firepower 2100 Series it looks like a pass...
I am trying to create a policy that blocks all SSL traffic to/from a particular host. I am using https curl to the host from a test client to prove this. I have tried adding an SSL policy which has the host and test client (both are in src/dst) with ...
According to document, quoted and link below,
"You have a 14-day evaluation period to review and assess the migration changes that are made to the threat defense devices before CDO automatically commits them. During this evaluation period, if you are...
Dear community, Based on the research I have done, seems that I can install either FDM or FMC virtual on VMWARE. But the Virtual environment that I currently have available is Hyper-V. So I want to check if you know any option on installing FMC Virt...
Hello,I'm trying to upgrade our ASA 5506-x from 9.12(1) version to 9.19 version and downloaded the 9.12 version but after upgrade the ASA and asdm my asa still showing the old version 9.12 but asdm was upgrade.Here is the show version command:System ...
Hi,can the Cisco ASDM Launcher for accessing the ASA only be used with the Oracle JRE ? Since the latest Oracle JREs are no longer free we're wondering if you can use another JAVA JRE such as Zulu or OpenJDK to use the Cisco ASDM launcher.Is that pos...
Hello, Everyone.
I am a beginner engineer studying FirePower, I have a question.When configuring IPS on FTDs linked to FMC, what is the difference between Intrusion Policy and NAP?
According to the document,
====================================
About...
