Hi Community:We have HOSTSCAN enabled on a virtualized ASA and in HA, with this version:We have the following queries:1. When I connect to a client VPN from the ASA, but after 2 hours I activate the HOSTSCAN on that client VPN and if I do not meet th...
Hi! Has anyone successfully setup Firepower Management Center with SSO (SAML with ADFS) together with Group Role Mapping? If so, do you have any good guide or other reference material? Have tried to figure it all out using cisco documentation but has...
Is it possible to setup an FTD 2110 cluster that would support VPN and/or Site2Site connections?
We recently migrated to a new ISP and utilized a new port for setup on our Cisco FP 1150. Everything seems to have gone off without a hitch, the site is online and utilizing the new ISP, however, the ISP/WAN/Gateway is still trying to use the old por...
Hi,I am using a FMT locally as in an airgapped environment. I load the tool complete the SSO with my account but the FMT screen remains greyed out..
I'm migrating from Anyconnect with an ASA Firewall to Secure Client with FMC/FTD. On the ASA I can specify a PAC file that is to be used by the client instead of the one configured in Windows. This is essential to allow for split tunnelling of O365 s...
Reaching out to the community for guidance on approach. We have an FMC on version 6.4 currently managing a set of devices. What we would like to do is copy the configuration and import into FMC B. We don't need FMC B to manage the devices, as the...
We've configured a routed FTD to act as the DHCP server on one interface for guest users. The interface is configured as a 10.100.176.2/23. The DHCP pool for the interface is less than 256 hosts (10.100.176.3 - 10.100.176.254). I understand the pool ...
The option is greyed out. Why can I not select this?
Hello,We have two FTDs (FPR1140) in an HA pair managed via FMC. Currently, the inside interface is simply one port on each device linking back to a switch. It has been this way for several years -- so the inside interface is referenced everywhere thr...
Hello together, we facing the Issue that our FMC doesn't show all SGTs in the Connection Logging. Sometimes it shows the SGTs as Source or Destination, sometimes the field is empty and mostly the source SGT is filled as unknown. We running Version ...
On FTD, with TLS decryption enabled, "the managed device caches server certificate data, which allows faster handshake processing in subsequent sessions that use the same certificate" (https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/ma...
Hi,I have a scenario and need to clarify the best/recommended practice:- one single ASA 5512 setup for remote VPN and it is connected to 2X ISPs for active/standby redundancy ( IP SLA in used )- configured remote SSL VPN so users can connect to ASA v...
Just to add, this appliance will boot in rmon mode and you need to type boot to start boot then only it will get the error message and prompt to enter PSID.
Dear ALL,I want to ask about the cisco FMC report, I'm a little confused in some parts. Is the result of this report the result of monitoring the work of the FMC device? I mean is this attacker's IP automatically blocked? do I have to add a layer 3/...
