I need to upgrade the FMC 750 from the current 6.2.3 to the latest supported image. The upgrade guide shows that the direct upgrade supported is version 6.4.0.16. Please give me your expert suggestion & plan for the above. If it is supported by the 6...
Forum Posts
Resolved! Upgrade Help on FTD 2110 ASA image
disk0:/mnt/boot/installables/switch/fxos-k8-fp2k-npu.2.6.1.198.SPA. FTD firewall running with ASA image 9.12(3)12. System image file is "disk0:/mnt/boot/installables/switch/fxos-k8-fp2k-npu.2.6.1.198.SPA"Config file at boot was "startup-config" Fir...
Hi. Config guide says ASA should pass PIM-SSM through when it's not LHR. Are there any commands to enable that? I see packets from source to 232.x.y.z in capture on the incoming interface (outside), but not on the outgoing (inside). ASA version is 9....
FMC accidently cleaned up and has nothing to boot on. How to restore it having the restore image
We have two ASA in an active/passive failover configurationWhen a failover occurs (by command or by failure of an interface) the http server stops to accept connections from ASDM.We see this message on the console:INFO: Restarting HTTPS server.ERROR:...
Getting the following error after I removed an unused network object from an object group on my ASA. Why am I getting this error? But I have no idea how they can be related? Yes, I understand they overlap, but it never was an issue before? Should I b...
Im having trouble with one user working and saving a word document to our file server over VPN. Firepower keeps blocking it as malware, but looking at the file there is no obvious signs of malware. Firepower doesnt appear to give me any reason why it...
Hi all, I have two ASA FirePower-2140 in Active/Standby Configuration. I need to configure one IP addres for management in FirePower-1 and other distinct IP address for management in FirePower-2 because I need to access both devices independently via...
Hello, I'm planning for a new FTD setup where the outside interface on the FTD connects with an etherchannel to a switchstack. On the same outside subnet there will be two ASR 1001 routers, each connected to different ISP:s. Now on the FTD I want to...
hi,I need to decrease number of fragments from default 24 to 1 one some ASA interfaces. show fragment command shows there are fragments comeing to that interface. How can I find source of fragments? Can I capture packets usimg ip packet offset or som...
Can we make Etherchannels to increase the bandwidth towards core switch from FPR 1120 or 2120? We have 1 GBPS ports only at firewall side and from the core switch to FPR, we required 2 GBPS speed to allow routing via firewall. The firewalls will be c...
We currently have 2 physical ISE appliances, we plan to add an additional one and will be hosted in AzureI am aware of the cost to the VM in Azure but confused a bit on the ISE license requirements. We are on the smart licensing on the current ISE de...
Hi All ,As Picture below. I try to failover ASA from Primary to Secondary and I monitor in ASDM data in graph lost while failover. I would like to know this situation is normal behavior of ASA or not . I'm running ASA Version 9.16(2)14 and ASDM 7.1...
Why does a visit to https://www.cisco-servicefinder.com/WarrantyFinder.aspx result in a certificate error due to CN being "anticounterfeit.cisco.com"?Certificate appears to be this one https://crt.sh/?id=9034231599 and that sure isn't for a www.cisco...
Hello all, I am trying to define FTD1150 using Firepower Device Manager and I want to permit deivces on any of my subnets with the same 4th octet at the host-portion of the address, so for example matching any from 10.1.1.250/24, 10.1.2.250/24, 10.1....
