The work around we were able to leverage was instead of using the NAS-IP-Address in the Radius policy set we used the Device-Access-IP-address which is still part of the Access-Request packet. We left the NAS-IP-Add and used the OR statement. Once t...
Hi,We went to configure up some 1010 firewalls last week with PPPoE and FMC management, however stumbled across this brilliant lack of feature from Cisco:"PPPoE is not supported. If your ISP requires PPPoE, you will have to put a router with PPPoE su...
As the title suggests, can someone please explain the “TLS 1.3 Server Identity Discovery” feature from true technical perspective? How does it work and how would it impact encrypted traffic? I thought I know what the feature does but I have got burne...
We are excited to announce the release of Cisco Firewall Migration Tool version 7.7.10, packed with powerful new features and enhancements designed to streamline your firewall migration process. This latest update brings significant improvements that...
When I go to event logging in the Cloud FMC, I cannot change the timerange. There's a lock symbol preventing me for this. How can I fix this? Right now it set to search for events the last months, which takes forever. Thanks /Chess
Hello,Can someone please tell me why I am unable to make changes to a text object and save it? I only see the close option as pictured when I should be seeing save and cancel as the options.Thank you in advance.
Hi All,I am facing an issue with a Firepower NGFW 1120 connected to a PPPOE Connection. Some websites are loading very slow, for example office.com. The PPPOE connection has an MTU set to 1492 on vlan id 6. It looks like packets are not fragmented ri...
I have multiple remote sites which connect to local ISPs but can only use DHCP to get public IP addresses. I need to setup Hub-and-Spoke route-based VPN tunnels between remote sites and my primary DC; backup DC, for failover. I configured two static ...
What is the CLI command to find the FPR9k -Supervisor module serial numbers on firepower?
Hi everyone, We are seeing a warning alert on our corporate Firepower Management Center (FMC) that says: Realm – Domain Unrecognized (62%) This is currently being reported on both HA units: The message shows that 62% of the logins are from an unrec...
Good morning everyone,I noticed that on my CSF 1210 CE FTD, using the Firewall Device Manager, Monitoring - Event viewer section,events are received and displayed only if the page is open.It is not possible to view events that occurred when I am not ...
Hello there. Cisco FMC manages over 200 FTDs at Suncor. Is there a way i.e. commands or script to get the full list of chassis serial number of FTDs from FMC? Thanks.
Is there a way to setup a time range object to occur monthly instead of daily? I'm not currently seeing a way via the GUI. I'm thinking that this is a limitation, unless someone provides a way... Use case: allow access on the same day each month. ...
I am using ASA-5516. I want to change the TLS1.2 ciphers to the following: ECDHE-RSA-AES256-GCM-SHA384DHE-RSA-AES256-GCM-SHA384ECDHE-RSA-AES128-GCM-SHA256DHE-RSA-AES128-GCM-SHA256 Can you help me with the commands or via ASDM?
Hello, I am sorry for posting this as it's similar to existing posts, but there seems to be massive confusion across the board with migrating the "perpetual" FS-VMW-10-SW-K9 license to the SF-FMC-VMW-10-K9. Most documentation notes that this pertains...
