Hello, we have a new install of FTDv to try it out before buying an appliance, we tried deploying to Hyper-V and also to VMware. VMware install was completely dead with no communication to the outside world (I presume it wants 10gig interfaces we don...
Forum Posts
Resolved! Integrate FMC HA with ISE pxGrid
Hi, I have one pair of FMC and on pair of FTD, currently FMC appliances in HA setup and we have successfully integrated with ISE pxGrid. The question now is what will happen if the primary FMC fails, will FTD HA still receive the IP-to-SGT mapping fr...
Hello, When I login to the FTD CLI, and check the management IP is shown as 203.0.113.130. My FTD version is 7.4.2. I checked in another FTD in version 7.2, but it is showing as "Unassigned". Please advise. Thanks Shabeeb
Planning to upgrade/replace ASA5525X with Firepower1120 Series loaded with ASA image. Need proper guidance on1. How to perform this move.2. Things to keep in mind.3. Can I simply load existing config on FPR1120 and turn it on. Will everything work ju...
Resolved! device-tracking mode guard vs legacy DAI
reading Feature history of SISF Security Configuration Guide, Cisco IOS XE Dublin 17.12.x (Catalyst 9400 Switches) - Configuring Switch Integrated Security Features [Support] - Cisco i have a feeling that device-tracking mode guard is an alternative ...
Resolved! Upgrade ASA 5545 with Firepower module
Hi,I would like to upgrade my ASA 5545 with Firepower module from version 9.12.4 to 9.14.4.The Firepower module is running version 6.4.0.14 and is managed by FMC, which runs version 7.0.2 (build 88). My question is:Is ASA firmware version 9.14.4 comp...
Hello everyone, I'm trying to use the Firewall Migration Tool (FMT v7.0.1) to migrate the config of ASA 9.12 to FMC 7.4.2. After successfully uploaded the the text file of ASA running config into FMT, and then started the conversion after selected th...
Hi all, Is anyone here also experience this kind of issue on the FTD? we notice that some return traffic being blocked on the FTD. Thanks for the answer!!
Resolved! Cisco FMC 1000 smart licensing error
Hi, Tried to register the FMC1000 device for smart licensing and got this error msg"Failed to send the message to the server. Please verify the DNS Server/HTTP Proxy settings."The DNS server IPs is configured and Proxy is not enabled. Tried the cur...
Currently on a Cisco ASA, we use RADIUS authentication for WEBVPN users. For the logs on the RADIUS server we are not receiving the originating public IP of the users failed/successful attempts, rather we are getting OUR public IP of the gateway for ...
Hi Folks, I'm having some issues I have an outside network 10.246.133.192/26 and inside host in network 10.244.17.99. The traffic between them is hitting for the temporary full access rule and doesnt hit the specific rule i've already applied. I'm at...
Hello I configured Threat detection on my FTD firewall over the weekend. Can someone please explain what the disabled section of this command means? https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/222383-configure...
I've enabled the following command "threat-detection service remote-access-authentication ... " on our Cisco ASA 5508X and it feels like it's only shun a maximum of 125 IPs. Is this possible? Does the ASA have a limit in number of IPs it can simultan...
we are going to migrate the asa to ftd fmc so in the migration documents mention trustpoint certificate as per-requisites.so my querry is where can i find this certificates and how to export/migrate this from asa to ftd fmc.
Like the title says, I am looking to setup a connection to an endpoint, but, with connectivity via 2 x IKEv2 tunnels (I've only even done single tunnels). It appears to me that if we set them up in paralell, we would run into all sorts of NAT issues ...
