Hi,pinging a VRF interface is not possible on FTD. Is this a feature?Pinging from VRF to somewhere works, but if you try to ping a VRF from outside, it's dropped by "implicit rule"? Phase: 5 Type: ACCESS-LIST Subtype: Result: DROP Elapsed time: 122 n...
Forum Posts
Resolved! Cisco FTDv -- How configure NTP via CLI
Hi Team: I am lab with FMC & FTD, I have FTDv installed in Esxi and chosed to use FMC, and also configured manager with registration keybut when I tried to add the FTD on FMC and failed, recommand error could be the time not syching with the same NTP...
HiWe are using Cisco switch Nexus 3548X and wondering if it's possible to use passwor
Anyone else experiencing a very long boot time for first time install of a 3110?I mean you could go on holiday and it wouldn't be done by the time you came back.I got to the ftd config wizard to set the IP. Then it told me mid way through it was goin...
is there a way to migrate existing SNORT2 rules to for example im looking at SID 1:62681,SID 1:62682,SID 1:62683,SID 1:62684 they appear on SNORT2 rule but not on SNORT3 so is there a way to migrate this rules? this are on the category malware-other...
Resolved! Routing issue with dst nat - ASA
Hello! and I hope someone can help me.As part of delivering a service to our customers I had the need to nat their destination (as well as our source). However, two different customers wanted me to nat their end and later noticed they use a similar I...
Hello,We recently purchased and installed a Firepower 1010 in a remote office intending to have VPN with the headquarters. At that remote office we have two vDSL lines which a providers router for each line. Each router has a cable connecting to an e...
Hi All . What is the alarm clear after Smart License out-of-compliance or authorization expire or other error message from smart licensing ? %ASA-3-444303: %SMART_LIC-3-OUT_OF_COMPLIANCE %ASA-5-444305: %SMART_LIC-5-AUTHORIZATION_EXPIRED: Authorizat...
So - I'm trying to find the changes my team did last night (non-prod environment) and I thought I could head to the syslog (Gear in top right ->Monitor->SyslogNow as expected I'm seeing tons of logs from this morning. I was hoping to skip like 15 pag...
Hello. Regarding the ingestion of 3rd party threat intelligence feeds, what is the difference between using Security Intelligence (under Objects / Object Management) and Sources (under Intelligence)? Is one better than the other for the ingestion of ...
Hi,We have been experiencing extremely slow performance in the GUI of our FMC recently. It takes an age to change screens and deploy policy changes.The management centre is on a hardware (1600) platform so the issue is not one of adequate resources i...
After upgrading our FMC/FTD from 7.0.1 to 7.0.2 it seems that connections tracked have jumped to a level that is not sustainable for our hardware. Could a configuration have been overwritten by the upgrade or is there an issue with the software that ...
Resolved! IPS mid-session pickup
Hi,i have 2 IPS deployed in inline mode standalone. Normally, traffic only run through 1 IPS. If i switch traffic from active ones to another, how can i achieve the mid-session pickup so that traffic will not be interrupted? is there any feature i ca...
Hi all,I'm fairly new to Cisco FTD so I'm wondering if anyone here can help me with an issue I'm currently having on my network. I can't seem to be able to reach a server via port 80/HTTP and I can see the traffic hitting my firewall rule "test-acp-r...
Resolved! NPS Radius
How can I ensure high availability for RADIUS service in Windows Server environment ? so it can withstand loss or even temporary downtime of any particular server holding NPS role.Please advice me Thanks
