Hi, I have FTDv managed by FMCv both residing on the same VMWare EXSi host. I want to recover the cli password of the ftd. Any leads will be highly appreciated
Forum Posts
Hi All, We have NPS configured to authenticate access to our ASA and it doesn't not appear to be working properly. The logs for the NPS indication I was granted access, it reflects the policy I created in the log details but the ASA rejects the logi...
Hi all,I'm building a like-for-like migration of an AnyConnect RA VPN from an ASA to a Cisco Secure Firewall 1230 managed locally with FDM.FTD DetailsCisco Secure Firewall 1230FTD Version 7.7.0 Build 89Managed locally (FDM)No FMCASA ConfigurationThe ...
Hello Community,I am having currently headaches with Firepower Management via 3rd Party Tools like OPManager.as far as I know, FTD can be managed through one of the following options:FDMFMCREST APIIm here just confirm if other management methods exis...
Hi All, Apologies if this is in the wrong area, but it covers a few. I'm setting up RA VPN using Anyconnect client 4.6, ASA headends are 5545's running 9.9. I am also integrating ISE 2.4.The clients currently authenticate via certificate on the ...
Hello,A customer have a vFTD in production and he also have a 1140 appliance that are currently not in use.He now wants to shut down the virtual FTD and move everything to the 1140 and he have asked me about the licenses that they currently use on th...
Resolved! How to test an IPS policy on cisco FMC.
I have finished configuring and deploying my Balanced Sec and Conn IPS. And i would like to test it before deployment. And I was wondering if anyone out there has an idea on how to test an IPS policy?
Hi All,I have FMC and i am trying to get "top web application seen" back to summary dash board in FMC as i have mistakenly deleted it but i do not see this option avaiable when i add widgets rather i see attached only with no option to specificaly ad...
Hi,Is it possible without downtime to change the access vlan on the 2 port-channels used for the ASA cluster control links ? I tried earlier on the switch with int range po 11, po 12 - switchport access vlan [new vlan] and the cluster broked. Maybe ...
Today, I'm working on the High Availability of Firepower Management Center in eve-ng. I've already done FTD HA which was quite easy to configure and verify, but HA for FMC is tough to get. I followed cisco's official documentation. The issue I found ...
Hello all.I'm trying to enroll a certificate to the FTD managed by FMC via EST protocol, but... upon creating a certificate object with EST fields filled in and attaching it to the FTD, i get an error in the FMC:crypto ca authenticate _TestEST nointe...
Hi All,Posting this for everyone's awareness.I encounter odd issue which Cisco TAC tried to troubleshoot before I had to redeploy the firewall for different setup. I was running FPR1010 running FTD version 7.6.4.This firewall was onboarded into cdFMC...
ASA is not forwarding RST packet even when sequence number is correct.Src ---- ASA --- DEST : when src is sending RST packet to DEST it does shows up on ASA ingress interface but not in egress interface so the conn is being RST by src but dest thinks...
I'm currently standing up a Cisco SSM On-Prem but have hit a bit of an issue regarding creating and adding a browser TLS certificate. Our (private) Certificate Authority have very strict rules on what can and can't be in the CSR, unfortunately the S...
I have two FTDs that have been offline for more than a year, and now I can deploy the configuration to change the IP address of the WAN interface to connect to the internet. I now have internet on site, but from a different ISP.
