Network Security

I have a legacy ACP rule on an FMC managed FTD with an FQDN as the destination.  The FQDN no longer exists but the FTD is continually trying to resolve the hostname.  I've disabled the rule (not deleted it) but the FTD continues to try and resolve th...

  How to disable the rate-limit alltogether - or at lest configure a higher value than 120 api-calls / minute ? According to the cocumentation:   The Firepower Management Center REST API implements rate limiting to reduce network load.The API will ac...

Hi,We're having a Firepower 1120 that does AnyConnect VPN peer and FMCv 7.4.2.1. In the Remote Access VPN Dashboard not all active sessions are shown, compared to the output of show vpn-sessiondb anyconnect via SSH on the FTD itself. Seems it shows o...

Hello, I'm running firepower 3100 cluster in native mode not multi-instance. must i upgrade the FXOS ? or it will be upgraded same as 2K 

We currently use ISE-PIC as our identity source for identity based policies in our FMC. According to the following EOL notice, ISE-PIC support will end November 30, 2027.  https://www.cisco.com/c/en/us/products/collateral/security/ise-passive-identit...

hi out thereWe have a couple of FMC 2600 running 2.7.2-500 which i would like to migrate to a virtual FMCv - i expected if i was on 2.7.2 on both "platforms" it would be simple - but no - when i load the backup on a FMCv running 2.7.2-500 it complain...

Hello, I have this strange issue on a firepower sensor running version 5.4 and managed by FMC 5.4.1.11. I understand it is end-of-life and end of support but we are in a situation that enforced that we address this issue with the existing set up. Thi...

hi out thereAfter i upgraded our FMC 2600 from 7.2.7 to 7.4.2 all FTD's suddely complains about SSE enrollment failure (9 FTD's in HA - 18 ) is this a known feature??

I am going to implement an FTD 1120 but the client does not want a condition greater than 30 min, just registering the FTD to the CDO takes 20 min, the option he gave us is to use a SOHO router but those routers give IP through DHCP, I have already m...

I'm going to use Secure Firewall Migration Tool to migrate only one paloalto firewall VSYS to cisco secure firewall. Is it applicable ?

All, we have been experiencing issues with HA on the latest version of software for FDM based HA pairs. Cisco has number of cases open and they dont seem to have a solution. The problem becomes transparent after the update takes place and it is relat...

Hi,I have this Firepower 3120 and I have changed mode from Native to container but since then I can't create an instance throught cli, and the big issue is, when I try to access it via GUI, it stacks on System is coming up, please wait...any support?...