Hello All, I have migrated my onprem fmc and its associated devices to cdo fmc and migration got successful. However due to some factor client needs to revert back to onprem fmc. I'm planning below steps to revert back. Pls review and let me know if ...
Forum Posts
I explored the Firepower MIBs to find the information about the logical devices(FTD instances) on a specific Firepower device/chassis. But I could not find anything that would give FTD instance information like, the name and its management IP . Is ...
Hello, After migrating an ASA to FTD via the migration tool, the DHCP relay settings are there in the FTD config but they are not viewable in the FMC UI. When trying to add the DHCP relay agent config in FMC, we see the following error. So it's like...
Resolved! ASDM does not start
Problem: ASDM Launcher does not start. I don't even get the ASDM Launcher login box or an error message. Nothing happens. When I look in Task Manager when trying to execute ASDM Launcher, I can see that "Java(TM) Plattform SE binary" (see screen shot...
Hi, I have a question. I build VTI's to 2 separate destinations (2 tunnel interfaces) that I would logically like to have as my outside Zone. Added to this a standard Inside and a DMZ. What happens to the "Sessions" noted in the firewall if a session...
Hello, We just deployed the FMC and I was tasked to try and configure it so that we can use it in conjunction with our token cards during the authentication process. I configured an HTTPS certificate that's been signed by my CA and uploaded that into...
Hi all, I have an issue on FMC caused by migration from on-prem MS AD to Azure AD. The problem is with RA VPN access policies using user-based restrictions. Previously, users authenticated with their on-prem MS AD credentials and gained access to all...
Hello All,In one of our sites over the weekend, the Domain Controller there rebooted. When this happened, it looks like some other device went and claimed the DC's 2 IP address. When I ran a show arp and show mac on the switch, I could see that the M...
Running FMC 6.2.3.3 with multiple domains with FTD 2100. Added network objects which are visible when scrolling through the object pages. But are not seen when using the search filter and entering the ip address or name. Nor are the new objects sh...
Hello,Currently we have AnyConnect deployed for our users to connect to the VPN which has no issues on this profile. We setup a new test AnyConnect Connection Profile which has a Group Policy configured to download Client Profile which is the managem...
Dear Team, We are looking the stable FTD version can upgrade to fixed the vulnerability and ensure it cover suck of attack like VPN brute force...and prevent AD Account locked out even attacker known the legit AD user. Kindly share commend / good pra...
Resolved! FDM1120 Management Interface IP Address
Hi I have two cisco 1120 firepower running on (HA) i configure the Management ip on both FDM but i cant access ftd gui and also i cant ping able to the ftd. I can access the FDM by Reaching the default gateway on my inside on https:// and i give ma...
Good day. Please advise. I issued a certificate on the organization's server fpr2027-2. I installed it in FPR. But FPR continues to sign with its own certificate. Not the one I created, although mine is indicated.
Can I backup my FMC 1600 from cli.I have lost access to gui and there is no backup. Also can TAC restore VMSDB refusing to start?
ouch, posted in wrong forum.I have tried using the platform settings ICMP options to let windows traceroute out to the internet, failed.Another fp admin shared me these rules below. They work, but what else do I need to do to make them secure? These ...
