Does anyone have a tested and successful procedure to onboard an HA pair of FTD devices (already set as active/standby via FDM)?I've been in a pilot program of CDO for several months (the first few spent fruitlessly gaining access to CDO).I've been t...
Forum Posts
Resolved! SGT as destination in firewall rule
Hi,We are in the process of implementing SGT based rules in our FTDs. Our FMC is integrated with ISE successfully and we retrieve SGT information normally.Packets coming from our users network are tagged so the firewall can inspect the SGT and match ...
Hi Guys, I would like to seek some guidance how do you size up your firewalls? Let us say there is a client-to-server communication and I know the packet size which is 50 KB per endpoint and I have 3000 endpoints, how can I have this data in Gbps so ...
Hi,Can anyone please provide me the procedure the version upgradation from 9.8(4)29 to 9.12.4.67? What are pre-requisites ?
Hi All, I need your help. I have a Cisco ASA5508 box which will act as an FTD. My requirement is to upgrade the IOS on ASA5508 first, and then proceed with FTD. Currently, my Cisco ASA5508 is running Version 9.9(2)91, and there are vulnerabilities th...
Last day of support is June 30 2024, so little more than 2 years before being replaced, and Cisco has not gone above 6.4 code for these appliances. The company doesn't leave EOL unsupported network hardware running in service for very long except s...
How wonder how many CPU there is in a Firepower Chassis FPR-4110-K9?Two commands with different results. The command "show cpu detailed" gives 8 CPU or core and cat /proc/cpuinfo show 24 CPUs.> show cpu detailedBreak down of per-core data path versus...
Assume two Firewall FW1 and FW2behind FW1 is router1 and behind FW2 is router2 which doing GRE tunneltraditional FW1 inside connect router1 uplinkwhy not the peer link between router 1 and router 2 also pass through the same firewall FW1 and FW2route...
Hey,I read in a document from 2018 that the virtual FMC supports 25 devices. I have 24 FTDs with version 7.2.4 and one virtual FMC hosted in azure with the same version. It looks like the FMC can only manage 22 FTDs. Can someone confirm this?Regards,...
Dear Team,I can ping / RDP / use ip based browsing but unable to browse through ASA . everything is allowed from outside and inside I can ping outside but I can RDP outside I can use the ip based browsing no problem . but normal internet browsing ...
Dear Team,I need more help. Thank you for the assistance. After following the guidance provided, we can now ping outside from ASA. However, we require additional help to enable ping from inside hosts to outside.https://community.cisco.com/t5/network-...
Why the Cisco ASA might respond to the ARP requests for other IP addresses on the network? We see sometimes that vm server shows in their arp table ASA MAC, although the arp table from ASA show the correct MAC of VM. "no proxy arp" could be used to s...
I have a FTD HA-Pair configured in FMC and it's inernal and external Interface is assigned to a Internal-Security Zone and an External-Security zone. So far so good. Now I added another FTD HA-pair (branch office) to the FMC and asking myself if it i...
I have an FMC at v7.0.6 with 7125 IPS v6.4. As I understand, this is the highest version that the FMC can go to and still communicate with the 7125. We have recently purchased 3110 firewalls, which have been configured with v7.1 FTD (the lowest versi...
I need to migrate ASA firewall to FTD 1140 with no FMC ,so I need to migrate to FDM. thanks in advance
