We are experiencing an issue where a packet is blocked by a Default Action but previous and subsequent traffic between the same src and dst is permitted. The blocked traffic event has no Ingress or Egress interface. The traffic has ACP that permits A...
Forum Posts
Hello Team, There is an internal site in our organisation and we can able to access it previously from all the browsers but recently we have enabled the SWG and due to some issues we have disabled it and from then we can able to access the site from ...
Hello Cisco Community,I am encountering an issue with my Cisco Firepower 1120 ASA running ASDM 7.16. The problem involves devices connected to a bridge group interface (BVI200) that cannot communicate with each other, although they can communicate wi...
Hi Community:We have HOSTSCAN enabled on a virtualized ASA and in HA, with this version:We have the following queries:1. When I connect to a client VPN from the ASA, but after 2 hours I activate the HOSTSCAN on that client VPN and if I do not meet th...
Hi! Has anyone successfully setup Firepower Management Center with SSO (SAML with ADFS) together with Group Role Mapping? If so, do you have any good guide or other reference material? Have tried to figure it all out using cisco documentation but has...
Resolved! Site2site vpn setup on 2110 FTD
Is it possible to setup an FTD 2110 cluster that would support VPN and/or Site2Site connections?
We recently migrated to a new ISP and utilized a new port for setup on our Cisco FP 1150. Everything seems to have gone off without a hitch, the site is online and utilizing the new ISP, however, the ISP/WAN/Gateway is still trying to use the old por...
Hi,I am using a FMT locally as in an airgapped environment. I load the tool complete the SSO with my account but the FMT screen remains greyed out..
I'm migrating from Anyconnect with an ASA Firewall to Secure Client with FMC/FTD. On the ASA I can specify a PAC file that is to be used by the client instead of the one configured in Windows. This is essential to allow for split tunnelling of O365 s...
Reaching out to the community for guidance on approach. We have an FMC on version 6.4 currently managing a set of devices. What we would like to do is copy the configuration and import into FMC B. We don't need FMC B to manage the devices, as the...
We've configured a routed FTD to act as the DHCP server on one interface for guest users. The interface is configured as a 10.100.176.2/23. The DHCP pool for the interface is less than 256 hosts (10.100.176.3 - 10.100.176.254). I understand the pool ...
The option is greyed out. Why can I not select this?
Hello,We have two FTDs (FPR1140) in an HA pair managed via FMC. Currently, the inside interface is simply one port on each device linking back to a switch. It has been this way for several years -- so the inside interface is referenced everywhere thr...
Hello together, we facing the Issue that our FMC doesn't show all SGTs in the Connection Logging. Sometimes it shows the SGTs as Source or Destination, sometimes the field is empty and mostly the source SGT is filled as unknown. We running Version ...
On FTD, with TLS decryption enabled, "the managed device caches server certificate data, which allows faster handshake processing in subsequent sessions that use the same certificate" (https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/ma...
