Why the Cisco ASA might respond to the ARP requests for other IP addresses on the network? We see sometimes that vm server shows in their arp table ASA MAC, although the arp table from ASA show the correct MAC of VM. "no proxy arp" could be used to s...
Forum Posts
I have a FTD HA-Pair configured in FMC and it's inernal and external Interface is assigned to a Internal-Security Zone and an External-Security zone. So far so good. Now I added another FTD HA-pair (branch office) to the FMC and asking myself if it i...
I have an FMC at v7.0.6 with 7125 IPS v6.4. As I understand, this is the highest version that the FMC can go to and still communicate with the 7125. We have recently purchased 3110 firewalls, which have been configured with v7.1 FTD (the lowest versi...
I need to migrate ASA firewall to FTD 1140 with no FMC ,so I need to migrate to FDM. thanks in advance
Hi, I have upcoming software upgrade and have below questions and needs answers please. Upgrading1 - vFMC2 - ASA 5516 with firepower module (Active/Standby)3 - FTD2100 (Active/Standby)4 - FTD Standalone5 - ASA5516 Standalone Questions :1 - Can I do s...
Hello together,we've the problem, that the tunnel communication between ASA 5585-x Firepower modul and FMC is broken, because a certificate is expired. The tunnel certificate is valid till the year 2026. But the self signed CA-Certificate is expired:...
Resolved! FTD dhcp relay (7.2.5)
Hi to all,a little bit confused about configuring the equivalent of command "ip helper address" in FMC.My topology is like this:<---Inside-dhcp-clients_vlan100----> FTD <--outside interface_vlan_27--> 6500 <-- SVI where the DHCP SERVER lives -->What...
Hi Team, deployment is being filed while installing anything at FTD which is locally managed. Jul 7 15:28:42 Starting Export for ApplicationDetectorsJul 7 15:28:48 Finished Export for ApplicationDetectorsJul 7 15:28:48 Starting Export for LSPJul 7...
Story:We have ISP they have provided us Huawei bridge type ONT https://tobtech.en.made-in-china.com/product/wFMTPaioLAbO/China-Huawei-Hn8010ts-Xgs-Pon-Bridging-Type-Ont.htmlThey asked we can attach our Cisco ASA with the box with VLAN Tagging on the ...
Hi everyone, im facing some issue in my configuration all 4 gears are Cisco Firepower 2130, and they are in HA mode, the top two is located in Site A and bottom two are located on Site B, the original configuration does not include port 15 and port ...
Hello team, I am trying to pass one GRE tunnel over two Cisco Firepower 1120 Theat Defense version 7.3.1-19 working as active/stand by. The devices are stand alone and those are not working or manged by FMC. How can I assure the traffic can be allowe...
Are there any plans to allow VPN tunnel creation through the API? I can't find anything on this subject but have a bulk of VPNs to migrate from ASA. They weren't brought over using the FTD migration tool.
Has anyone Created statoc route on the FTD sensor via the CLI?Mine looks like it goes throught bu when i FDM into it, i do not see them. Any Advice will be appreciated.Thanks.
So my youtube-googlefoo has failed me. I'm looking for some basic help -- and based on that, the issue I'm having, which I don't even know if it's possible....I have an ASA 5555-x with advanced license; Cable Modem service with single IP; My VPN ter...
Resolved! Delete cached SSH server key in FXOS
We are using SCP to backup FXOS config and recently upgraded the SCP server from RHEL7 to RHEL9 but managed to retain the same IP address. I got the following error message when doing the SCP back up."Host key has changed for the remote server. Clear...
