I am trying to understand if this is even possible. I have two 1120's in an HA pair. I have two ISP's connected to each one and failover using an SLA works for the internet in the building. Most of the company is remote and the company is 24/7. I...
Forum Posts
Hi, I have been tasked to migrated 3 firewalls into 1 FTD HA pair. After completing several 1 to 1 migrations this is my first many to one. Can the migration tool be used effectively to do this task, what is the best process? Thanks
We are facing an issue configuring our Cisco FTD1010 firewall as a gateway for a remote site. Port 1/1 is connected to our ISP modem and receives an IP address via DHCP. Port 1/2, with an IP address of 10.0.250.2/30, acts as a router connected to our...
We use a FTD 2110 HA cluster managed by FMC. We have SSL Remote Access VPN running with about 600 dialed in users. Now we randomly experience bad performance on client and also see that Data path CPU is alway up to 75% and above. From the FTD Datashe...
Hi All ,I try to find number of server per aaa-group and I see 16 but not sure is it correct ? Please help me for clarify. https://www.cisco.com/c/en/us/td/docs/security/asa/asa917/configuration/general/asa-917-general-config/aaa-radius.html
Does anyone gets the error of "Error while pushing security zone: You are not allowed to perform the requested operation."? I have manually defined security zones in the FMT during zone & interface mapping stage. FMT version 7.0.1 FMC version 7.4.2...
In the datasheet, I cannot find any information related to this topic. If anyone gives me a link about this, it will be beneficial for me.
Resolved! FMC-ASA-SFR compatibility
Hello Cisco Community,I have an ASA 5545-X running with the following versions:ASA Software: 9.14(4)24Firepower Module (SFR): 6.6.7Firepower Management Center (FMC): 7.0.6I'm planning to upgrade my FMC to version 7.3, but I'm unsure about the compati...
I have an FMC that has no Internet connectivity and I have to run Manual upload/updates on this device. Doing the GeoLocation update via file updates the GeoLocation, however the IP Package download shows it is non-existent. Running geolocation upda...
Hi all,We are looking to enable/integrate CSDAC on our FMC to better manage ACPs.However, as we've been hit with CSCwh64784 which is affecting ACP rules with multiple FQDN objects, wondered whether rules that use Dynamic Objects consisting of multip...
I have a question about the HA failover setup of the FTDs. We had an incident where the upstream link to the ISP was lost (crossed in the attached image, please note the physical link was up), at the time the secondary unit was the active one. Had it...
We have a new FMC (v 7.4.0) and copied all settings of External authentication Radius object from older FMC where it worked fine. However Radius authentication to the new FTDs was failing and I found out that CLI access filter can't include "admin" a...
Resolved! ASA Upgrade, lost ssh access
Hello,I just upgraded a cisco ASA 5506 from 9.6-9.16(4)57 and I cannot ssh into it any longer.Get an error: "server unexpectedly closed the network connection"I can access via asdm.I have ssh enabled and I have ssh allowed form only 2 machines (a loc...
Guys , please help me . is there anyway to get traffic history to specific destination from cisco FMC or FTD?
I am preparing to implement site-to-site VPN across multiple firewalls located at two sites. I will be setting up 2 DVTI hubs, one hub for each site. I will set up the 2 DVTI hubs to be redundant to each other, so in the event that one hub goes down,...
