Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...
Forum Posts
Hi Community! My organization has a hub and spoke configuration and one of the spokes (a firepower 1010) are on a slow wan link (they are in a very rural area and internet speed is terrible). Deployments from FMC to that device always reach 50% then ...
Resolved! Close network ports on Cisco ISR
Hi, I have a Cisco ISR 4451 with several internet facing VRF interfaces with crypto maps mounted and need to close all network ports other than IPsec without affecting the tunnels. An ACL directly in the interface will do the job?Thank you in advance...
Hello, I have a brand new FTD 1010 and want to manage it via the outside data interface. However, after entering the command "configure network management-data-interface", I receive the following error message "Error: This command is not supported w...
HI...I have a Cisco 3925 Router and would like to setup DNSSEC on it...I have searched for Documentation but cannot find any.Does anyone knowwhat I should be looking for? thx
Hello Team,Wished to stop managing FTDv via FMC and start managing it Locally. The FTDv already is up and has quite some configs.How do i achieve this? are there any implications, say possibilities of loosing current configurations?
Hi,I intend to upgrade my FTD's in HA. I have already upgraded my FMC to version 7.4 today. My FTD's are on version 7.01. Following are my questions - Is it safe to upgrade FTD's from 7.01 to 7.3.1-19 (I shall patch them to 7.3.1-84 lately) ? I have ...
We are troubleshooting a packet loss issue in our environment. Users are on the outside of the FTD, Servers on the inside. Servers are VMs in ESXi Hyperflex environment (forgive me for poor terminology).We can reproduce the issue consistently. Host m...
Hi, I am trying to find Packet Per Second (PPS) values from cli or gui with no luck. Is there any command or health monitor to track packets per second? Regards,
Hi everybody, my name is Stephanie and I connect customers with the teams working on new features for security products such as Secure Network Analytics, Secure Endpoint Firewall products, XDR and more. I'm reaching out today because we are looking ...
Hello @I want to integrate ASA5506-X in Cisco Prime but it looks SNMP doesn't work. though the configured community is correct.The setup is Site-to-Site IKEv2 IPsec VPN.The ASA Software Version 9.16(4). I want to manage it via the routed inside inte...
We have a "critical security finding" even though our ASA SSLVPN web portal login page is shutdown on our ASA 5525. The "test" that is done is an http get is sent to https://<external IP>:443/+CSCOE+/logon.html and a response is returned. The respo...
Hi,I need to change a production interface from Data to Data-Sharing, but I can't find in documentation if is possible to do in a production interface without downtime or the step-by-step to do it.Is that possible?
Hello all,None of the zones are able to resolve DNS. I can ping 8.8.8.8 from LAN and DMZ but cannot ping google.com. The DNS policy under policies > DNS is defaultDNS server group under Objects > Object Management has all the ISP provided DNS servers...
Resolved! ASA firewall and Cisco ids
I am writing to request some information that would help me solve some problem in my university case study. I am particularly interested in learning about the following:The key differences between ASA firewall and cisco idsWhich one is more important...
Dears Please provide a best secure way to access dmz server from inside network via ftd fmc firewall . please provide if have any video or documentation for this . Thank you so much............
