Hi I am currently preparing a migration for a customer from ASA5585 to Firepower 4115 appliances. I have migrated all config using migration tool (v3.0.2) to FMC (v7.2.2) and pushed to FTD's (v7.0.5). On the migration tool, when I validate the ASA co...
Forum Posts
We recently purchased 2 FPR1150 configured in HA. From the Home Screen in Defense Orchestrator, going to VPN>Remote Access Monitoring>Live, we could see who was signed in via AnyConnect.But as of 8/21, that information stopped being displayed. The ...
I need help configuring a TFTP server access list to prevent attackers who acquire SNMP write privileges for obtaining device configuration information. I have SNMP access list configured already. So it is not a problem. But I need to deal with TFTP....
I have installed the Cisco Firepower Management Center virtual on esxi and set it up with FTD, assigning it the IP address 172.16.9.10. The PC can ping this IP address successfully, but when I access it, the screen is empty except for the favicon, an...
Here is what users are seeing: Login denied. Your environment does not meet the access criteria defined by your administrator.I have taken over for another admin and there are 5 DAP policies and 1 default. I am not sure where to change the minimum fo...
Hello folksWe are having a lot of trouble with a brand new firepower 3105 device.After the initial setup the device switched off spontaneously - as if the power supply was interrupted, which was not the case.After switching it on again, the status LE...
Resolved! Architecture for ISA-3000 Firewall
Hello, I was reviewing the following documentation: Firepower Data Path Troubleshooting: Overview - Cisco In order to troubleshoot packet flow in a ISA-3000-2C2F running 7.2.5 => it is not clear what is the architecture this product is using to prop...
I am wanting to add a newly installed and configured Firepower 2130 to a FMC cluster that consists of all Firepower 1150s. Is this possible. If not, is there a way to migrate the access and NAT policies, objects, etc to the newly installed FTD? Thank...
I'm new to FTD however have many years experience on ASA. I'm trying to create an anyconnect profile using OKTA as a SAML auth provider. I have followed the guides set by OKTA as well as researched and i believe i have it configured correctly however...
ASA version is I know, how to check, is there any way to check below vul for ASDM version as well? Sr No. Model ASA Version ASDM version 1 ASA 5555-X 9.12(4)67 7.19(1)95 2 ASAv50 9.18(4)22 7.19(1)95 CVE ID Cisco Link CVE-2024-203...
Resolved! Cisco FTD and Cisco FMC images in CML
Hi Team. I am considering Home Lab options and I wanted to find out if I will get access to Cisco Firepower Threat Defence and Firepower Management Center if I purchase Cisco Modelling Lab (CML) ? I want to do some labbing with those images. Any advi...
Dear All, I have 2 internet connections terminating on the ASA as primary and backup. Its required that when the traffic is going out from link1 it should be translated to 1.1.1.1 and when out link2 it should be translated to 2.2.2.2. Can we achieve ...
Resolved! Import json file to FMC
Hey everyone,I am trying to import a json file that we obtained from Okta to list all their IPs into our FMCs and see if we can group them into an object. The json lists over 2,000 IPs that supposedly we need to whitelist. Is there a way to import th...
Hello, We are running FMC 7.2 and on the summery dashboard on the Threats TAB, there is a list called "Indication of Compromise by Host" where we can see hosts that have downloaded malware and are CnC connected. It looks like this: We would like to...
Hi,I have a Cisco ASAv FPR-1010. The unit is running cisco-asa-fp1k.9.18.4.SPA and I want to downgrade it to cisco-asa-fp1k.9.16.4.SPA. I've copied the 9.16 package onto the disk of the ASA fine okay. In this setup (appliance mode) i am finding th...
