We have a number of FTD devices that, due to a deployment mistake, were all set to the same Unique NAT ID when registered to the FMC. It all works surprisingly well considering the issue, but only if 1 device establishes its connection at a time. How...
Forum Posts
Resolved! Upgrade path for Firepower 2110
We are currently running 7.0.6.2 on the FMC and 7.0.6.2-65 on the Threat Defense units themselves (released 4-16-24). I'd like to continue to upgrade them but it looks like the next "Suggested release" is 7.2.5 released November 2023. Is it going b...
Resolved! CISCO firepower 1140 Local CA Server
hi,i'm trying to enable local CA server on cisco firepower 1140, there is option to enable it using ASDM, but I get error.I tried CLI, and there is no command 'crypto ca sever' in config mode. Does it mean that this device does not have this function...
Resolved! FTD access to external interface
I am unable to get ping replies from my FTD outside interface when pinging from the Internet. I can ping out, through the FTD to Internet address from internal clients. Basically, if I do an nmap scan from outside - I see no open ports on my FTD. ...
Hi, im running a Cisco ASA 5505 with 9.1(2) with Anyconnect enabled. I read that there are some vulnerabilities on this device. Am i affected or any recommendations on what i should do?
HelloI need to export all events from level informational from an ASA5508 to a syslog server. Basically, I set it as "logging trap informational"This device provides firewall services as well as remote SSL VPN access and WebVPN.I noticed that AAA and...
Resolved! Cisco ASA ACL inspection
Hello, I have a question about how a Cisco ASA inspects traffic and hits on an ACL? Does it perform scans from top to bottom, or does it select the best match based on the specific traffic passing the firewall? Thanks,MB
anyone experienced this weird error. i dont find any reason for the disk to be full since it is still running at 45%.tried clearing some log files on these directories but still the error still present/var/sf/detection_engines/<some GUID>/backup//var...
hi folks - with the amount of updates which suddenly causes me to upgrade FTD's urgently I would like to hear what other do for the Firepower Management Center. As this has to be at least on same lavel or higher it would make sense to be on 7.3.x cur...
Hello everybody,the customer has FMCv 7.2.5.1 running and I need to upgrade it because devices need to be upgrade too.The Cisco Software Checker shows me the rel. 7.2.6 in this release trainas the successor but the download page does not offer 7.2.6 ...
Is there any truth to the rumor that ASA software has been leaked, encryption reverse-engineered etc.? Just wondered if it's true or nonsense. I guess this might get deleted, which would be an answer of a sort I suppose.
We have CIMC reporting to our Tenable scanner that it is vulnerablity to Terrapin Vulnerability. see below : ./Terrapin-Scanner Report Remote Banner: SSH-2.0-OpenSSH_8.8 PKIX[13.2.3] ChaCha20-Poly1305 support: true CBC-EtM support: fa...
Hello,Similar to the discussion linked below. Id like to see the username of an ISE guest user on the source user in each connection event in our FMC. Similar to how it shows with our AD users (those are being IP mapped via the ISE identity source a...
Resolved! FTD 2110
Hi Team,We are using the FTD 2110 as ASA using the ASA image. Now we need to upgrade the FTD with the ASA image itself. May i know how to upgrade? As we do not have ASDM access to these devices? How to upload the image? Can we use TFTP? If yes, may i...
Hello, I just upgraded FMC to version 7.2.6 and want to upgrade a FTD H/A pair next. However, I can only select "unattended mode", which will copy the upgrade file to the FTD and then run the readiness check. I would prefer to do those steps manually...
