I am trying to create custom dashboard showing how many times specific local custom SNORT 3 rules are meet. I would like to see the SNORT ID and number of events triggers as a result of this rule.My device is currently running:Cisco Firepower 4120 T...
Forum Posts
Hello, we have 4 standalone FTDv100 units in Azure running in production. Once in a while, a specific unit would experience packet loss to the internet, anywhere from 10 to even 30% packet loss sometimes. I basically do 1000 pings in sys support di...
HiFMC 1000 was fine then 2 days ago I tried to log on to Web GUI and I'm geeting a wierd proxy error that I have never seen before, I can acces via CLI but it is very unresponsive and slow I tried to restart from CLI and nothing happened it never did...
Assume Wifi infrastructure user and management port use the same class A10.128.0.0/9 <- user use or management use if most secured?10.192.0.0/10 <- user use or management use if most secured?10.0.0.0/2510.0.0.0/2610.0.0.0/8which should be and should ...
Resolved! FMC virtual needed license
Hello all,I have a FMC virtual running in a KVM and I get a license error.Seems in the past the needed one for 2 devices was SF-FMC-KVM-2-K9 but I can't find the new one.Any one knows wich is the current one for KVM FMC virtual?Thank you
Hello allI'm receiving hundreds of warning messages i am getting in our syslog from our Cisco ASA 5516-x. The warning message is:Message: %FTD-4-419002: Duplicate TCP SYN from it-client-ap:10.245.xx.1x/54557 to outside:5x.1xx.1x9.x/443 with different...
Hello, I have several profiles of RA VPNIn all of them I use the traffic filter option.In addition, I have the "Bypass Access Control policy for decrypted traffic" ticked. The problem I have is that I do not see the logs of VPN activity in the event...
I was able to manually backup our FTD to our TFTP server using the following command on CLI. I am trying to find out how I can schedule this automatically rather than manually doing it but can't find a good resource for the TFTP method. Anyone know...
Hi, I faced following NAT issue, Can anybody help me please. T_T DiagramUE(20.20.20.246~250/24) ---(remote access)--- (outside) VPN (AWS Interface: 20.20.20.1) --- Server(20.20.20.50)1) UE <- Server ping test (20.20.20.50 -> 20.20.20.247): success2...
Hi all,Previously, I have configured OSPF on ASA Firewall and is very similar to Cisco Routers and Switches.However, when I tried to configure OSPF on FirePOWER Firewall, the SmartCLI and FlexConfig looks pretty confusing.How do you relate the follow...
HiDoes anyone have any experience of deploying HCL 'BigFix' to an FMC virtual server?
Hello everyone,I have completed FMC upgrade from version 7.0.6 to 7.2.5 and patched 7.2.5.1.after upgrading I faced a problem that related to the smart licenses.Firepower Management CenterSmart License MonitorSmart Licensing ID certificate renewal fa...
I migrated number of FTDs from on-prem FMC to cdFMC last week. The migration tasks were successfuly but not commit yet. Certain FTDs are configured with Site-to-Site VPN and/or RA VPN. I can view the status and configuration within cdFMC but the CDO ...
Hi I am deploying over 900 FTD 1120 to Cisco CDO and cdFMC, doing the configuration of the device inside the cdFMC i am applying a health policy, platform settings and add the device to a device group. To my understanding of the API, you need to sp...
Cisco Defense Orchestrator's (CDO) Secure Device Connector (SCD) supports the use of a proxy for the SDC to CDO outbound connection. Requirements:- This is only for the SDC container and not for the host Linux Operating System. - The proxy cannot do ...
