I have a pair of FPR2130 running ASA code in HA. Everything looks configured OK to me, though obviously there's an issue somewhere! sho failover presents no errors.I need to failover to compete a firmware upgrade, however when via the primary device ...
Forum Posts
We are using a Firepower 2100 series.This Firepower is running in platform mode and 9.16(2)14 as the OS. We are considering upgrading to the 9.18.4 series to fix a known vulnerability.I am assuming this will not be a problem as there is a proven proc...
We are currently operating Firepower 4120 devices with version 7.2.6.As part of our annual requirements, we need to conduct PSN scans.To accommodate these scans, it's necessary to disable the IPS feature, as it interferes with the process.Our Access ...
I am attempting to migrate an ASA configuration to FTD and when I run the migration tool and the below selected the parsing fails. When I deselect RAVPN option the parsing is successful. What could be causing this?I have checked the licencing on the ...
Hello,the question is in the title. Is it possible to use the ASA as a router between 2 internal networks? interface GigabitEthernet1/1nameif outsidesecurity-level 100ip address 10.0.1.254 255.255.255.0interface GigabitEthernet1/2nameif insidesecurit...
Does Firepower have the ability to setup and filter on policies that are based on words, numbers, etc...? Not content restriction or URL filtering. But a dirty word search and filter.
Currently my FTD is running version 7.0.4, I am thinking of upgrading to Release 7.2.8, can I upgrade to 7.2.8 at once or should I do it gradually?It is a Firepower 1120 managed by FMC version 7.2.4
We are planning to upgrade Firepower2120（platform mode, standalone）from version 9.16.2.14 to 9.18.4.40,and I have a question about the internal process during installing packages metioned in this upgrade guide below. Cisco Secure Firewall ASA Upgrade...
Dear All, We keep having issues with this, anyway we can solve it? or is a hardware issue?Trying to shutdown Service Module SM1/0LLSGCCM001#*Sep 18 00:36:30.910: %SRE_SM-6-STATE_CHANGE: SM1/0 changing state from SERVICE_MODULE_STATE_WREG to SERVICE_M...
Hello Guy,Currently, I have issue with restore ftd file from FMC via scp with error message below. is there anyone guy ever meet this issue. any guys can help me on this. > restore remote-manager-backup location 10.x.x.x admin /var/sf/remote-backup F...
Want to clear old faults from list presented on Overview screen in the GUI of a FPR-C9300?What are the commands from the command line? Thanks in advance.
Resolved! FPR-2100 Default gateway for mgmt on ASA
If Mgmt1/1 interface is on another subnet, how can I put a different gw for that?(or something like a vrf)or it uses the default gw that I already setup on FX-OS?!lolbut what about 5555x that doesn't have FX-OS? Thanks,
Hi have exported a CA cert from my ASA and added to objects > PKI > cert enrollment. When added I then went to devices >certs and generated the CSR to be signed but the cert issued against the CSR has only hostname ‘firepower’ rather than FW-HOSTNAME...
It seems that ASA failover works fine without the standby address. What is the advantage of wasting an IP address?Regards,AM
I am running a couple of Cisco FTD 2110 managed with FMC and am looking for the best way to block access to our remote access VPN by IP. From doing some reading it looks like the best (and only?) way to do this is via a control plane ACL deployed via...
