I patched our FMC from 6.4.0.2 to 6.4.0.7. I am receiving a warning that states " Successfully connected to cloud, Number of files detected in traffic exceeds module threshold." Is this something that will clear itself up in time? This warning was n...
Hi All, Wondering if anyone has seen this problem. Trying to register a 6.4 FTD with 6.4 FMC. Logs on the FTD are showing errors with the FMC SSL certificate and the sftunnel is never established between the the two devices. All devices are straig...
Hi Team, I need to Migrate Cisco ASA to Firepower.Below is NAT config on ASAglobal (outside) 1 interfacenat (inside) 0 172.16.0.0 255.240.0.0nat (inside) 0 10.0.0.0 255.0.0.0Seems Global is for traffic going from inside to outside and getting PAT to ...
Hi, On a FPR running in ASA mode, i have logged an ACE for traffic leaving this interface (incoming from ASA context). The logs are being sent to Elastic. When I am looking for the logs I see some strange results. This is my ACE: access-list acl_A ex...
Greetings,The current version of my FMC for VMware is v7.0.5 build 72 with FX-OS V2.10.1 build 1400.I am planning now to proceed with the upgrade of FMC. Which version you would recommend for me to proceed with? Do i need also to upgrade FTDs with th...
Hello everybody, a customer has a Firepower 1120 running rel. 7.3.0 with the FDM We have to troubleshoot S2S VPN tunnel issues and I went to the CLIand entered: > system support diag# debug crypto ikev2 protocol 255# debug crypto cond peer X.X.X.X Wh...
Hi,Is it possible on FTD to access a public IP assigned to outside interface from the inside network? We have the usecase where users are using AnyConnect and want to access the VPN peer from a guest network provided by the firewall. As they are swit...
Hello, I would like to know if there is any enhancement done to display the FTD active/standby unit in the hostname of the respective FTD CLI. In the ASA we have the command "prompt hostname priority state cisco ftd". Can we do anything similar in FT...
Dear ALL, I'm configuring the FTD firewall as internal firewall, I have two interfaces for inside and outside network, the inside interface IP address is 192.168.100.1/24 and the outside network is 172.16.30.1/24.I have allow all traffic in access co...
Hello everyone,Recently my Cisco Firepower Management Center VMWare is having some issues. I used to access to the vFMC through the webGUI. But during the last few days, when I access it, it prompts 500 Internal Server Error.I then tried to access th...
Hi guys,we want to automate the firmware and asdm file upload to our ton of ASAs but I can't find out the specifics.I want to mimic ASDM which does a https post to fqdn/admin/disk0/filename-on-flash.I found out that 'Content-Length' in the http heade...
Hello everybody, our customer has a Firepower 2130 running ASA image rel. 9.14(4)24. They have several hundret S2S tunnels (see attached ASDM screen dump) and I have the task to extract all group policy names that are using IKEv1 and their peer IP ad...
I am trying to find the best way to purge old endpoints. These endpoints are VMs that get recreated everyday but need to be purged out of ISE. Ive noticed they have been stacking up (Same IPs/Hostnames) within ISE. I have purge policies created to de...
as i know in fmc-ftd application control or filtering in policy is work for user --> application however does it work for server<---application. in short my source will be xyz public application and destination is my private server in this scenario f...
Hi guys,Firewall Device Manager- Firepower 1010 (standalone mode, managed via https locally). I want to enable IPS on it. I created a new policy and I used one of the default IPS policies (maximum detection). I can see some hits but when I do e.g. nm...
