I keep getting a 'Blocked 'count_summary'' error when I click on the proceed button after selecting the FTD device. Anyone know why this is happening?
Forum Posts
There might an obvious answer to this My understanding is that, when you create an l7 ACP entry on Firepower, Few packets are sent through the DAQ engine to identify the app so it can evaluate the l7 ACL. Then based on l7 Evaulation its allowed or b...
Hi, everyone I don't know which firepower to buy.If switching fabric bandwidth 50G, which firepower should i buy?I mean a firepower will substitutes a switch. thank you best regards
Resolved! FTD 2130 NAT-T Disable problem
Hi all, Have a problem with NAT-T. I have FTD 2130 device managed by FMC which is terminating all my VPN connections. FTD does not have PUBLIC IP attached to internet, instead I have internet router that is doing 1-to-1 static NAT without any port fo...
Hi Guys,We have a FTD terminating a few IPSec tunnels. One of them are having connectivity issues with larger packets so we suspect that there is a smaller MTU set somewhere towards the destination. As far as I know the FTD can overwrite the endpoint...
I have several l2l tunnels we are moving and decommissioning. I see a few tunnels with very little traffic, but traffic nonetheless based on RX and TX counts, and I need to see who exactly and what servers are still using the tunnel, and which ports....
We have successfully tested SSO with MFA logon to the FMC. However, when we attempt to logout, we receive the following message You are logged in using SSO provided by Azure. To protect your Firewall Management Center account from unauthorized access...
Can I configure the FTD interface using the LINA (diagnostic-cli ) in exec mode or Enable and Disable the interface ?I'm trying to move my outside interface from eth1/1 to eth1/13(10GB)
Resolved! the number of nat sessions of firepower?
Hi I want to know how many 1:1 nat sessions Firepowers can have. is it unlimited? For an example, 1 public ip can have 65536 PAT session. If I have 2 public ips, PAT session can be 130,000 sessions? I can't find any information about the nat table ...
Hello, i need to export the entire configuration of 2 ftd 2130 managed by FMC, how can i do that?Is there any possibility to achieve it via CLI?I would like to have a .txt. file, i didn't find anything on official documentation. Thank you Regards
Resolved! Delete config on ASA 5510
We have an old ASA that we're trying to change the password on to allow us to delete the config. I follow steps to get into ROMMOM mode (using this conversation), change the config register, to allow me to boot to change the password, but when I boot...
Hello,we have a Cisco ASA witch ASDM but seems to be a certificate issue. The certificate is using SHA256, is self signed but Java is saying that there is an issue with SHA1 since the error is saying "denyAfter constraint check failed: SHA1 used with...
Resolved! License Needed for FMC on Hyper-V
Now that FMC is available for Hyper-V, I got ours running successfully, but it seems I need a license for it since it says it's not in compliance. Anyone have the SKU or name of what it should be?
We're currently using vFMC (KVM) and a couple of FTD1010 and FTD2110 (some FMC managed and some are locally managed - FDM). For now I had luck only with one, to be able to update successfully from one to another version. Other FTDs 1010 have a consta...
I am seeing what appears to be a botnet (mainly Brazil IPs) trying to brute force connect to my ASA on port 443. Hundreds of thousands of attempts per day, but slow enough not to trip threat detection. Ive created a acl group to block control plane ...
