Hey guys, New to this area, would like to ask a question about configuration converting between ASA and Firepower 1120. I used the migration tool to convert the configuration from ASA 5516-X into FTD with FMC (Firepower 1120), there is an ACL in ASA ...
Forum Posts
HiI will deploy a CSSP Proxy Virtual Machine to send events from my ASA firepower devices to cloud. For the configuration of send Syslog events to this Virtual Machine I get some questions: Also I want to know if is possible to configure 2 syslog ser...
Hi, my company uses a Cisco 4115 FTD version 7.2.7 to provide remote access for company employees. Cisco Secure Client and Cisco ISE are used as part of this solution. In a recent penetration test, the auditors advised that we disable cipher suites t...
Hi community, we want to deploy firepower 3105 - version 7.3.1 to bridge two VLAN(119 & 191) on distribution switch and allow two network to communicate with the same subnet as following we have run the following test with 10.127.190.11 and 10.127.19...
Resolved! implementing private VLANs on Firepower
My department is looking for implementing private VLANs on Firepower 2000 and 4000 series. Is this feature available or supported on FTD/FMC? Thanks in advance for the reply.
hi,i got a 2911 router which currently has a site-to-site VPN working using the 'crypto keyring vrf' (for VRF aware IPSEC).i need to add another site (CUST-2) using the same command but different VRF (CUST-2) but getting the log and deug below. i alr...
We manage FTD through FMC ver 7.2.7. I would like to monitor a BGP session running on FTD. How to configure syslog in platform settings to collect these events?
Resolved! TX retries dropped packets
Hi,Got my FPR 1010 FTD running between my ISP and UDM PRO all is more or less good.Sry for any stupid questions still a little green in the field.I'm starting to see a high amount of TX retries for my 2 AP's, this has started after the FPR was introd...
Hi to all,i am posting this in order to have your opinion about it.Today our users behind the FTD faced timeouts as well as high RTTs.Digging a little bit i noticed that CPU core 16 (not the other cores) was continuously steady at 100%. After disabl...
Resolved! firepower custom URL feed in ACP rule
My understanding is that URL feeds in FirePower SI are updated dynamically and take effect w/o having to do a policy deploy to the FTD. Does the same apply to custom URL feeds used in an ACP rule? My idea would be to create a custom URL feed on a loc...
Hi,I have a pair of 2110 FTD firewalls in HA that are currently managed locally VIA FDM and have config (rules, routing) on them. I am required to add the FTD firewalls to an FMC, so they can be managed through the FMC. How do i move the configs(rule...
We have several VLANs on the network, and some devices on the management VLAN are experiencing significant packet loss.I suspect there might be an issue with the firewall pair. When I checked the interface for the management VLAN, I noticed traffic o...
hello everyone!! so basically we have one ASA with SFR which is register with FMC which use as IPS using some ACL policy and i need to migrate the ASA to the new FTD does ASA backup more system:running-config hold the SFR-FMC IPS policys? is not then...
I have an odd situation involving two ASA firewalls.Firewall 1 is our main firewall, an ASA5585-X. Firewall 2 is an ASA5506For reasons that aren't germane to this problem, one of our research groups is required to place their server and its attendant...
Issue:After software upgrade on the FW the VPN session not recieving the right Group-Policy from ISE. Even when ISE gets all the information of the user from AD (no change here), the authorization policy that was matching before is not matching anymo...
