Hi AllAfter copiedAccessing tftp://1xxxxx/anyconnect-win-4.10.00093-webdeploy-k9.pkg...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!Writing file disk0:/anyconnect-win-4.10.00093-webdeploy-k9.pkg...!!!!!!!!!!!!!!!!!!!...
I am using the latest FTD migration tool to move contexts from our old ASA5585 to FMC without FTD.There is a major problem when doing this conversion as their is no way the tool can apply the destination zone i want and configured it to, it sets it t...
In FMC object management, is there a way to get the object description to display on the main screen where all objects are listed in tabular format? For me that is more important than override which I personally avoid. Hoping I just missed something....
Hi all,See the below comment in a few of my policies.. is there something that needs addressing for each of the rules showing this comment?
Hello Everyone, I am migrating from a ASA with SFR module to aFTD running ASA image and another FTD running inline sets. The plan is to replace ASA with FTD running ASA image and SFR with an FTD running inline sets. In the current ASA we have around ...
Good moorning everyone,I need tô config the 1122 with redundant interface because i need tô conect port 1 in one switch and port 3 em other switch and both ports need tô have the same subnet and also this interfaces need tô have some subinterfaces.My...
Hi,I have one single ASA with single public IP/Interface configured to establish l2l vpn tunnel to two different Frigates for the SAME Interesting traffic. it works fine if either of fortigates IP turns down but when both are up then ASA connects to ...
Hello, Very new to Cisco IOS devices and AAA configurations. We currently have a PKI infrastructure, and are using NPS for radius authentication/authorization.I've been tasked to change our baseline IOS configuration so that it can validate user pki ...
Please help to know if anyway to fix this observation or any workaround. The remote SSH server is configured to allow key exchange algorithms which are considered weak.This is based on the IETF draft document Key Exchange (KEX) Method Updates and Re...
Hi All, Hoping someone can answer few questions around enabling WPA3 on Meraki. I work for a large enterprise and we are looking to enable WPA3 for all our offices. We use Meraki APs at all our offices and currently WPA2 is enabled and users authenti...
Hi, We have an FTD 3110 Active/Passive cluster with a requirement to group 30 network interfaces (sub-interfaces) into 3 zones, with traffic controls for both intra-zone and inter-zone traffic. For example, intra-zone traffic would involve traffic be...
Hi,I'm getting dupplicate syn from our Firepower FTD. The setup is that VPN clients connect via outside (Internet) to access internal stuff. The VPN Clients get an IP from pool 10.1.1.x (for example) to access internal 10.2.2.x.Internet also needs to...
Hello guys,I recently built a DMVPN tunnel from a spoke to hub but when I can’t ping Google unless I put access-list ip any any under the outside interface on the firewall. When I take the acl off ever goes down, when put the acl back on everything ...
Hi all, is there any detailed documentation for FMC REST API GET call /api/fmc_config/v1/domain/{domainUUID}/health/metrics which can get health statistics? The documentation mentions metric -- "name of the prometheus metric to be queried" however, t...
Hi guys, I found the configuration of a ASA 5525 strange to me. I can't understand why there's Permit ip any any at the end of ACL, as follows: access-list DMZ_access_in extended permit tcp object SRV_SYSLOG eq 6514 object SRV_MC eq 6514 access-l...
