Assume two Firewall FW1 and FW2behind FW1 is router1 and behind FW2 is router2 which doing GRE tunneltraditional FW1 inside connect router1 uplinkwhy not the peer link between router 1 and router 2 also pass through the same firewall FW1 and FW2route...
Forum Posts
Hey,I read in a document from 2018 that the virtual FMC supports 25 devices. I have 24 FTDs with version 7.2.4 and one virtual FMC hosted in azure with the same version. It looks like the FMC can only manage 22 FTDs. Can someone confirm this?Regards,...
Dear Team,I can ping / RDP / use ip based browsing but unable to browse through ASA . everything is allowed from outside and inside I can ping outside but I can RDP outside I can use the ip based browsing no problem . but normal internet browsing ...
Dear Team,I need more help. Thank you for the assistance. After following the guidance provided, we can now ping outside from ASA. However, we require additional help to enable ping from inside hosts to outside.https://community.cisco.com/t5/network-...
Why the Cisco ASA might respond to the ARP requests for other IP addresses on the network? We see sometimes that vm server shows in their arp table ASA MAC, although the arp table from ASA show the correct MAC of VM. "no proxy arp" could be used to s...
I have a FTD HA-Pair configured in FMC and it's inernal and external Interface is assigned to a Internal-Security Zone and an External-Security zone. So far so good. Now I added another FTD HA-pair (branch office) to the FMC and asking myself if it i...
I have an FMC at v7.0.6 with 7125 IPS v6.4. As I understand, this is the highest version that the FMC can go to and still communicate with the 7125. We have recently purchased 3110 firewalls, which have been configured with v7.1 FTD (the lowest versi...
I need to migrate ASA firewall to FTD 1140 with no FMC ,so I need to migrate to FDM. thanks in advance
Hi, I have upcoming software upgrade and have below questions and needs answers please. Upgrading1 - vFMC2 - ASA 5516 with firepower module (Active/Standby)3 - FTD2100 (Active/Standby)4 - FTD Standalone5 - ASA5516 Standalone Questions :1 - Can I do s...
Hello together,we've the problem, that the tunnel communication between ASA 5585-x Firepower modul and FMC is broken, because a certificate is expired. The tunnel certificate is valid till the year 2026. But the self signed CA-Certificate is expired:...
Resolved! FTD dhcp relay (7.2.5)
Hi to all,a little bit confused about configuring the equivalent of command "ip helper address" in FMC.My topology is like this:<---Inside-dhcp-clients_vlan100----> FTD <--outside interface_vlan_27--> 6500 <-- SVI where the DHCP SERVER lives -->What...
Hi Team, deployment is being filed while installing anything at FTD which is locally managed. Jul 7 15:28:42 Starting Export for ApplicationDetectorsJul 7 15:28:48 Finished Export for ApplicationDetectorsJul 7 15:28:48 Starting Export for LSPJul 7 ...
Story:We have ISP they have provided us Huawei bridge type ONT https://tobtech.en.made-in-china.com/product/wFMTPaioLAbO/China-Huawei-Hn8010ts-Xgs-Pon-Bridging-Type-Ont.htmlThey asked we can attach our Cisco ASA with the box with VLAN Tagging on the ...
Hi everyone, im facing some issue in my configuration all 4 gears are Cisco Firepower 2130, and they are in HA mode, the top two is located in Site A and bottom two are located on Site B, the original configuration does not include port 15 and port ...
Hello team, I am trying to pass one GRE tunnel over two Cisco Firepower 1120 Theat Defense version 7.3.1-19 working as active/stand by. The devices are stand alone and those are not working or manged by FMC. How can I assure the traffic can be allowe...
