Hello community, My client has around 30 FTDs which are managed by the same FMC. I want to upgrade FMC but, to do so FMC requires to deploy all pending FTDs, which in our case they are like 15 FTDs which at the moment are offline and I cannot deploy ...
Forum Posts
I am trying to import the policies from my on prem FMCv which has the latest available version 7.4.1xx, exported the policy, them went to CDO and imported only to get an error that the CDO version is 7.4.2 and incompatible with 7.4.1. How am I supp...
I didn't realize that Cisco ASAs will only send login credentials via PAP to Windows Radius Servers for admin users? From what I can find, MS-CHAP v2 is only supported for tunnel/VPN users? I was hoping to use Cisco Duo to implement MFA for a variety...
helloPlease, I need to migration FTD from FMC to FDM, because I facing many problems in Vmware, my question, what do I need to do to manage locally? which steps to migration to FDM?and what about configuration? Will I lose all configuration and manag...
Hello,Intermittent ping response between VTP Server and Firepower FTD device. Core switch vlan interfaces configured for vlan10 and vlan20, and switchport trunk allow vlan10 and vlan20 via direct layer-3 Firepower Inside-interface Sub-interface vlan1...
HelloAt the beginning I have a lot of problem with information chaos with the differences between Snort 2 and Snort 3. There are plenty books and info about Snort 2, but not many about Snort 3. For example Snort 2 Manual (y. 2020) is 270 page book an...
Is it possible in multi-instance mode to run both the FTD and the ASA images? Currently in the process of replacing both the 7125 IPS and the 5555-X firewalls with the 3120.
How can we disable sfhassd on FTD. Getting continuous alerts. FTD version is 7.2.5 and FMC is 7.4
HiThis is regarding Cisco ASA 5525. I have 2 firewalls with IOS version 9.4(4)22 & 9.8(4)20 In these firewalls wanted to check, if it can support any of the below.diffie-hellman-group-exchange-sha256diffie-hellman-group16-sha512diffie-hellman-group1...
Hi,We're using ASA and have some object-groups that contain hundreds to thousands of IP ranges, for example AS networks, for example public IP ranges of cloud providers, customers or networks where bots are originating attacking our AnyConnect VPN pe...
We are running version 9.1 of ASA code. I am having trouble allowing traceroute through the ASA. I don't need the ASA to be a hop in that traceroute. I have issue the fixup commands for icmp and icmp error. I have allowed ICMP, Echo, Echo Reply, time...
We need to migrate our production ASA from the current Platform mode to Appliance mode. The ASA are setup in a HA configuration. I can't find any documentation about how this migration can be done in HA mode. Only standalone: https://www.firewall.cx/...
Dear All,Want to clarify if route leak works from GRT to a user VRF and vice versa. I have a requirement were Teams traffic needs to be leaked from GRT to a seperate VRF. Already existing firewalls do it from User vrf to seperate teams vrf.. But need...
Firepower 2110 platform to application in HA with minimum downtime. I found this document but it dos not include HA. How can we do this without disrupting the network? Converting Cisco Firepower from Platform mode to Appliance mode. Full ASA Backup w...
Gostaria de mapear vizinhos de um LLDP da minha rede, qual software recomendam? Há acesso trial?
