Possibly looks like we have db corruption. I can browse to the login URL but there is no login screen. If I run DBCheck.pl I get:running database integrity check with the following options:- use exception directory /usr/local/sf/etc/db_exceptions- ch...
Forum Posts
Resolved! SSH to ISR Requires Key Size of 1024?
Hello All,A few months back I noticed my WSL Linux was requiring me to add this "ssh -o RequiredRSASize=1024 user@ipaddr" to some hosts that I ssh to, this included a few servers and some Cisco gear.I'm guessing my WSL had some update or openssh was ...
Hi,I have migrated a VPN from ASA to FTD using the FMT and it is not coming up.. not sure what is causing this.212.196.162.228:500/To 10.102.65.145:500 show rouIKEv2-PROTO-7: (2474): SM Trace-> SA: I_SPI=A8D3B8E783CCBE46 R_SPI=0000000000000000 (I) Ms...
FYI: This new release posted this week adds some new features and resolves over 500 bugs https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/720/threat-defense-release-notes-72.html#c_new-features-fmc-726
Version 7.6 has just been posted. https://software.cisco.com/download/home/286259687/type/286271056/release/7.6.0. Happy upgrading. Some nice new features and FMC finally gets the magnetic UI framework.
Migrated from a Cisco ASA to FTD and the ASA had an option to use NAT-T enabled. The FTD seems to have a similar option but it is asking for the public IP which the ASA did not. This is not able to be done the public IP is a round robin and not set o...
Hi guysI passed Cisco ISE exam recently an got Cisco Certified Specialist (Security Identity Management Implementation), and already have CCNA (Cisco Certified Network Associate).I am looking for a job related to Cisco Identity Service Engine. Is the...
New Deployment FTD with version 7.4.2.1 with inline mode, My access control policy has all traffic set to allow, my intrusion policy is NOT set to drop (Detection Mode) and also security intelligence set as monitor. Running show asp drop command on m...
Hi AllI have recently moved from an ASA to an FTD, using CDOI am having trouble with some remote VPN settings and I want to check the logs, the same as I used to do on the ASDM logs on the ASA.Where is this functionality on the FTD? I cannot find any...
Hi GuysI would like to view security logs i.e connection logs from my FTD in my cisco defence orchestrator (cdFMC).What licence do I need for this please?Many thanks
Hi, I am looking for backup solution for FTD instance on Firepower device. we are deploying 2 instance of FTD on Firepower device. We are also deploying FTDv in our environment. We are using FMCv on KVM to manage these FTD devices. FMCv doesn't suppo...
Resolved! Whitelist on CPLANE
Cisco ASA Software Version 9.18(3)55SSP OS Version 2.12(0.519)I've been working with a managed service partner to try Whitelisting as a way to combat brute-force attacks. I've added a whitelist of known IP addresses to allow access and deny any other...
Hi GuysI am trying to troubleshoot an issue with LDAP from my FTD, I have the ftd onboarded to the cloud cdFMC for management.I have done a packet capture and I can see the requests are coming from 169.254.1.3 rather than the inside interface IP.How ...
Hello together, I'm using Cisco Firepower Management Center for VMware version 6.2.3.5. Today I tried to renew the HTTPS-Certificate under System -> Configuration -> HTTPS Certificate. I generated a request for our CA and later I tried to import the ...
Hi GuysI am creating an AD Realm in cdFMC via CDO so I can authenticate VPN users using AD.I have created the realm and added my AD servers in there, selected the FW as the proxy as the requests need to come from the Firewall, it should use the routi...
