I have Cisco Firepower with FMC and 3 ISP public IP in one subnet /24. First IP is in firewalls interface, second IP in dedicated PC, third IP I want to 1 to 1 NAT to my DMZ network IP from firewall, but ISP has IP-MAC binding and he can't see my arp...
I am configuring Cisco FTD 1100. Need to use three IP addresses on outside interface. Is there nay way how to do that?Thank YouJaromir
Hi team,I have captured some TCP traffic in Cisco ASA. But from that capture, I'm unable to examine the TCP handshake flow.Looks like, TCP flags are placed in random order. Is ASA capturing the traffic in sequence order?What is the flag for SYNC ACK...
I have a couple ASA5506x firewalls and one of them has something I can’t find information online about. The flash memory on the one in question shows 7,000 something MB of RAM and when I open the file management in ASDM, it shows there’s the normal D...
Hi All, My organisation brought an fmcv license to manage 2 pair of Asa cluster. Basically i need to know with brought license I can deploy single fmcv with manage devices upto 10 or upto 10 fmcv with same count of manage devices . PFA snapshot
I'm trying to generate a usage report from FDM but the numbers are not adding up from what our ISP dashboard is reporting (not even close). Anyone knows if all internet traffic is being captured by the firewall? Here is a screenshot from the FDM r...
Hi team, Please help me on upgrading an Active/Standby ASA with multiple context. Hope you could give me detailed procedure for the upgrade. We have 8.2.5 software version and upgrading to 9.1.7. I am not well versed on multiple context. How will I ...
I am trying to get traceroute to work from my internal network to the Internet through a FTD2110 managed by FMC running 6.2.3 code I created an access policy allowing ICMP type 3 and 11 from the outside to the inside. I added ICMP permit statements...
Hi, I want to check the current log rotation for my FMC & how can i change it if required. In other words i need to understand the period for which FMC is retaining logs for the logical devices. Thanks
While investigating vulnerabilities, I discovered some vulnerabilities on Cisco FTD's known as "Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability (cisco-sa-20180129-asa1)". I'm looking for any possible soluti...
Hello I try to firmware upgrade Firepower2110 ASA using ASDM but (Image to upload functions there is no ASA selection - only ASDM, REST Agent ) it should be ASA right? is there any enable ASA in this function?
I'm currently standing up a Cisco SSM On-Prem but have hit a bit of an issue regarding creating and adding a browser TLS certificate. Our (private) Certificate Authority have very strict rules on what can and can't be in the CSR, unfortunately the S...
Dear Cisco-Community,I couldn't find a proper solution online yet...As mentioned in the title, I've been confronted with this issue on my FMC and it's detaining me to make deployments. I hope for your assistance, thank you in advance.Kind regards
Hi Guys:I am configure our first FMC 1700 chassis now, and trying to enable the CIMC interfaceFMC management interface is configured and reachable. I went to System > Configuration > Console configuration > light Out Management, then try to configure...
Recently we changed the Firepower 4000 series and upgraded the FMC to 7.4.0 and FTD to 7.2.5.2and all policies have been restored, we notice that huge traffic from different subnets is not allowed to continueexample: if we upload a huge file from vla...
