Hello - can FTD/FMC running snort3 collect >TLS1.2 client hello/server cert metadata collection in connection events for example? I do not want to deploy EVE and SSL decrypt is not an option. I just want to capture server cert metadata, SNI etc. Is t...
Forum Posts
Can you tell me what FMC's /var/run/rpc.statd.pid file is doing? admin@vFMC3:/var/run$ ls -al -rw-r--r-- 1 998 997 0 Feb 7 05:36 rpc.statd.pid
Hi all,How OGS works in Cisco FTD?We were facing memory utilisation issue on FTD 3120 due to high ACE count.Cisco suggested to enable OGS.Earlier ACE count was :7905432After enabling OGS ACE count: 24905 I want to know how this OGS works and how it o...
I have an FMC 2700 on version 7.4.2.1 which is managing an FTDv running 7.2.9 and having a problem getting a site to site VPN working, it's the 5th one I've set up and the first one to this particular company (the other four have all worked fine firs...
FPR1010-ASA-K9_ASAにて、「failover」コマンドを入力すると、ERROR: Command requires failover licenseと表示される。license smartfeature tier standardfeature security-plus過去に上記コマンドを入力すると解決した事例があったため投入すると、feature security-plusを入力したタイミングでERROR: Please acquire a valid feature tie...
We also have this issue running FMC 7.6.0 which is not on the list of known issues. I've engaged with cisco TAC and they have a workaround.
Hello I upgraded CSM from 4.19 to 4.21 and I have a problem. In one of the firewalls the access rules do not load. In Cisco Security Manager it shows 50 out of 211 loaded. But it is stuck in that it does not change. Any ideas? Thanks and regards, ...
Hello! Has anyone with an FTD managed by FMC run into this issue? I am trying to upgrade the FTD os using the FMC wizard. When I go to push out the image file to the devices (2 devices as part of an HA pair) it seems to only push it out to one of the...
Hello,We are trying to switch from radius authentication to DUO SSO SAML login on our remote access VPN using secure client.It's been working great except that in the FMC/FTD the username is no longer showing up, causing rule that validate group memb...
Hello all, I would like to know how to calculate current throughput value at FTD 2130. What sort of information need to calculate it.? Thanks for any response to solve it.
An additional workaround for using the version 1.9 of the ASDM launcher is to manually add a Java Argument into the run.bat file. This is the file that the desktop shortcut launches.Add the argument -Djava.net.useSystemProxies=true
In FMC version 7.2, there was an option to disable invidual subinterfaces from health monitor like this screenshot shows However it seams like this option is not there anymore in FMC version 7.6. I can only select the port-channel but not any of the...
hi,I have two ASDM sessions opened toward two firewall devices. I need to copy rules between them. If I copy rule on source device, paste option on destination asdm session is not available. Is there a way to copy rule directly to another device usin...
I have a few questions about trying to configure an FTD currently configured with multiple inside interfaces using source NAT to outside to work properly with a second ISP for failover purposes. I'm not trying to divide specific traffic between the t...
