Hello everyone, I have the following issue:The customer would like to disable FMC packet fragmentation globally. According to the Cisco documentation it is quite straightforward.Source chapter: Fragment SettingsCisco Secure Firewall Management Center...
Forum Posts
Hello! Does anyone know if there's an easier way to configure and create rules that require manual entry in the FMC policy creation dashboard? We are working on a migration from the ASA which has over 300 rules and our company would also like to reca...
Resolved! NGFW Sizing
Hi,Please I need an advise to determine the right NGFW based on the below requirements:- Each NGFW physical appliance should provide minimum of 240 Gbps Firewall throughput.- Each NGFW physical appliance must support minimum of 850,000 new TCP connec...
Is there a tool available to convert a Check Point Security Policy to a Cisco Access Control List?The process of doing this manually would be time consuming and could result in human error
Resolved! Problems with SNMP on the ASA 5555-X
Hello everyone,I have a CISCO ASA 5555-X configured in multi-context mode and I want to monitor it via SNMP.However, I can't find the MIB files for this device.How can I get them?I don't have access to ftp://ftp.cisco.com/pub/mibs/supportlists/asa/as...
Resolved! Route Based VPN FTD
HIWe have several Policy based VPNs, I have read in a Cisco document that the sysopt permit-vpn is not supported with Route based VPN and I will need to configure access control for this, so that being said does this affect our policy based VPNs whic...
Resolved! ASA-AWS unable to ssh into new instance
This question has been asked a couple of other times, but no one has ever answered it. I am bringing up an AWS instance running the Cisco ASAv 9.9.2.1 application, but I am unable to ssh into the resulting instance.I am following the instructions pro...
I have an ASA on which I'm trying to use PBR to route to one of two ISPs which I'll call "slow" and "fast." The interface to the slow ISP is connected to a subnet on which the next-hop address is clearly in the subnet and it would count as "directly ...
I was looking at deploying a 3120 in multi instance mode with 4 instances but I would want each instance in a different FMC domain for different teams to manage independently. Is this possible? The only examples of multi instance I've seen put the in...
Resolved! FDM DHCP Relay
HelloWe have Cisco 1140 with FDM Management, version is 7.2.5. How do I need to configure DHCP Relay? Because I did all configuration, but int not working
Hello Experts, I have a Cisco FMC with managed Device AMP 8130 Appliance with on-premises Threat Grid and Private Cloud. I got issues about the Integration part of the FMC with TG and FMC with Private Cloud and also having trouble with TG to Privat...
Hi, Does anyone know if we need something special on our CCO account in order to use the Secure Firewall Migration Tool? I have installed it, and as soon as I run it, it opens a browser and asks me to authenticate. Afterwards, I got a message saying...
Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It ment...
(FP)Firepower 1000 has routed sub-interfaces as shown in diagram. HostA is able to ping HostB, and vice-versa. FP Vlan20 responds to ping request from HostA. FP Vlan30 responds to ping request from HostB. All works with the following exception, FP Vl...
