Hi,Quick clarification. In the FMC, when it says "Subscribe to SXP topic", does it mean that the FMC gets the SGTs data from SXP over pxGrid, right? That's why we need to have the "Publish SXP bindings on pxGrid" checkbox enabled in ISE and there is ...
Good Day All, Hoping you can help me here. I have an old SKU for FMCv on vmware. (FS-VMW-2-SW-K9) Though I'm trying to renew the support SKUs attached to as well. (SWSS/CON-ECMU-VMW) However, because the above FMCv SKU is end of sale. Is there a gene...
I have experienced the weirdest thing. I converted a fpr-1010 from ASA to FTD. I only had port 1 and the management port connected. I was able to configure it, obtain licensing and test out anyconnect. As soon as I would connect anything to any o...
Hello,I am a little confused about the following statement on the document Security and VPN Configuration Guide, Cisco IOS XE 17.x - IPsec Anti-Replay Window Expanding and Disabling [Cisco IOS XE 17] - Cisco"Moving QoS scheduling before the encryptio...
Good Day Everyone.I have a Cisco Firepower Management Center for VMwareSoftware Version 6.5.0.4Operating System Cisco Fire Linux OSOperating System Version 6.5.0that is attached to an ASA5508 Can I safely shut down the Firepower Management Center VM ...
Hi Community,Before upgrading FMC to version 7.4 or later, please verify whether you have an FTD or eStreamer service connected to the FMC in the subnets 172.18.0.0/24 or 172.18.1.0/24. This is important because, after the upgrade, two additional i...
Hello,We have Cisco FMC, version is 7.0.1I would like to configure access to the FMC based on AD Groups, integration done thought LDAP. At this moment we have 2 AD groups:First - Full Access (Grant-FMC-Admin), Second - Read Only Security Analyst (Gra...
Hello everyone.I'm currently setting up a FMC and while attempting to use external authentication via LDAP, for some reason the FMC is not querying properly.Basically whenever I attempt the test the query, it only finds user machines and groups CNs ,...
I've setup Remote Access VPN on FTD 1120 using FDM method. I've used the following link to configure the firewall. https://www.cisco.com/c/en/us/support/docs/network-management/remote-access/212424-anyconnect-remote-access-vpn-configurati.htmlThe iss...
Dear Team, We have requirement to configure GRE TUnnel with Zscaler in Cisco Firepower Is it possible to create GRE Tunnel From Cisco Firepower ? if it is possible can you share any document for this configuration Regards,Harmesh Yadav
My team recently stood up Cisco's Secure Network Analytics (SNA) utilizing it's Adaptive Network Control (ANC) Policy enforcment with ISE via pxGrid but SNA is using the default alarm thresholds which are triggering quarantines within the production ...
Dear, I have FMC manage two ASA box , I need Migration All configuration from two ASA to a new two FTD model (3105 NGFW) , notes the same FMC manage anew FTD boxes and migration with the same IP MGMT . what is the best way to migration the same confi...
We've recently added a new FTD 1120 to our FMC and during this process, apparently something was done differently, as there is now a Chassis URL in the Chassis column in Device Management in FMC. There doesn't seem to be any problem with the device's...
Dear Team, I unable to ssh the FTD device. No External authentication is configured. Local authentication enable. When ssh the device user name & password asking. After giving proper credentials access denied. But on same credentials we able to login...
I Have firepower2100 with smart licence activated. I would like use VPN remote access, my problem is Export-Controlled Features is disabled. I opened case in cisco team, they recommded me to use 3DES-AES license .. I have Two question : 1-i just hav...
