Hello ASA 9.20 release (on FPR2100 device). I had a TAC case about TACACS+ Remote Address = 0.0.0.0 in certain Authentication Requests (when using public key auth, and also in Authorization requests) - the TAC told me to "no ssh stack ciscossh" - tha...
Forum Posts
Resolved! FTD Reference Bandwidth
Hi all. Im trying to configure OSPF on a FTD firewall trought FMC. The idea is to tunning the Ref Bandwidth to be homologous on the nexus neighbor side. Reference bandwidth unit is 100 mbps Actually the Ref Bandwidth is by default on the FTD (7.4), i...
Resolved! FMC with Identity Policy using Azure AD
Hi All,We are currently running FMC and FTD with user identity access control polices. FMC is integrated with ISE, which in turn is integrated with our on-premises Microsoft Active Directing domain using WMI so that user to IP mappings can be passed ...
Hello Pros.How to fix vulnerability CVE 2025-20197 thru 20201 on Cisco 4300 Router and 9200 Switches. What IOS XE version will fix the vulnerabilities for a 4300 router and a 2900 switch. Thanks in advances.
I'm trying to test a FTD in AWS. I'm using the PAYG AMI (ami-04d7dfdc0d700e259). I assumed it would include the required licensing as it a PAYG. Fortinet, PAN, F5 etc include the licensing with their PAYG AMIs.When I try to add a new IKEv2 policy usi...
We have a ASAv in Azure that is only used for AnyConnect. We have a Site-to-Site between Azure and a Watchguard FW at our Colo. The tunnel is up but I can't get to anything in the Colo while connected to the Secure Client. I can get from Azure to the...
Hi,Is possible to use the Security Intelligence Network Lists and Feeds (custom feed) on ASA 9.14? (no firepower)The requirement is to block a list of Ip taken from internal threat intelligence managed outside the ASA.Thanks.
Has anyone ran into the issue where logging into ASDM for a Cisco ASA 5516-X give the following error:"The certificate present in this device is not valid. Certificate date is Expired or not valid as per current date"How could we renew the certificat...
I am getting this error when trying to launch ASDM. New install of Windows 10 Professional. I have been running this successfully on other Windows 10 PCs. Has anyone seen this and know the fix?
HI CAN SOMEONE HELP ME WITH BASIC CONFIGURATION?THE COMMANDS FROM 5520 ARE DIFFERENT.
Hi,We're having encountered this bug here on all Firepower devices: https://bst.cisco.com/bugsearch/bug/CSCwn92248Firepower 1120 (HA active/standby), running FTD 7.4.2.2, connected with 4x1 Gb/s vPC to a pair of N9K-C9348GC-FXP, running NXOS 10.2(4)F...
Is there any way, that a fmc managed ftd can act as ntp server for other devices. fmc,ftd.ntpI running fmc 1700 version 7.7.0 and ftd 1220cxThanks Carsten.
Hello All,I'm facing following issue, I've got Cisco Firewall ISA3000 v7.0.1 and I successfully assigned an IP address to the management interface by logging via console port. Later, while connected over the mgmt port I'm able to ping, also I can SSH...
Hi Everyone, For not so long time ago we have deployed FTD 1010 (software v. 7.0.1) and pretty short after deployment it started to generate 'High Memory Usage' critical alerts. Configuration of that FP is minimalist and CPU is daround 4% -5% all the...
Resolved! FTD H/A split brain issues
Hello, A customer has around 20 H/A pairs of FTD 1010's that are managed by a cdFMC. Recently I saw some alerts in the FMC saying "High availability is in split brain" When I Iogin to the FTD's and do a "show failover state", both FTD's says communi...
