After upgrading our FMC/FTD from 7.0.1 to 7.0.2 it seems that connections tracked have jumped to a level that is not sustainable for our hardware. Could a configuration have been overwritten by the upgrade or is there an issue with the software that ...
Forum Posts
Resolved! IPS mid-session pickup
Hi,i have 2 IPS deployed in inline mode standalone. Normally, traffic only run through 1 IPS. If i switch traffic from active ones to another, how can i achieve the mid-session pickup so that traffic will not be interrupted? is there any feature i ca...
Hi all,I'm fairly new to Cisco FTD so I'm wondering if anyone here can help me with an issue I'm currently having on my network. I can't seem to be able to reach a server via port 80/HTTP and I can see the traffic hitting my firewall rule "test-acp-r...
Resolved! NPS Radius
How can I ensure high availability for RADIUS service in Windows Server environment ? so it can withstand loss or even temporary downtime of any particular server holding NPS role.Please advice me Thanks
Resolved! IPsec on C891
Can use IPsec on C891? Thanks -------------------------------------------------Device# PID SN-------------------------------------------------*0 C891FJ-K9 FGL183722U0 License Information for 'c800'License Level: advipservices Type: PermanentNext re...
Question on NGIPS can someone please explain how under Transport and Network Layer the "inline normalization" work on NGIPS ?
Cisco ASA send NSEL data . "Netflix Secure Event Logging. Hello I bit confuse how the 3 map are configure are and what they do. can some please tell me if I am correct how ASA is setup to send DATA to NSEL. Policy Map = setup to collect IP addressCla...
Hi,We are looking at an active active internet feed, which is achieved by using multi HSRP groups, on an ASA do you know if its possible to route traffic out to two different gateways if both gateway IP's are in the same subnet?
Resolved! ECMP behaviour on FMC managed FTD 7.2.4
Hi All,,We've just enabled ECMP with two 1Gbps AWS direct connect links over the weekend.The ECMP zone is created in the global routing table, we didn't use VRF, and added equal cost static routes destined to AWS networks in the global routing table....
Cisco FTD 4150 unable to send mem usage into our monitoring tool. CPU usage is Okay. Cisco FTD 4145 unable to send mem usage. I am using below OIDs 1.3.6.1.4.1.9.9.48.1.1.1.5. ciscoMemoryPoolUsed 1.3.6.1.4.1.9.9.48.1.1.1.6. ciscoMemoryPoolFr...
Could you help me check oid of cpu and memory as the cli command below ? > show cpu usageCPU utilization for 5 seconds = 8%; 1 minute: 9%; 5 minutes: 9% >> show memoryFree memory: 46568759296 bytes (62%)Used memory: 29531140096 bytes (38%)-----------...
hi,my SNMP mgmt systems does not read interface traffic stats. Everything is on zero. What could be a problem? br
HI All,We have had an incident today that one of the objects are suddenly blacklisted and traffic getting dropped by snort, even though our intrusion policy is not inline and doing IDS. I've looked at global block list in the SI objects, but not list...
Hello,I have a new setup for a client, any insight would be greatly appreciated.Setup will be: ISP1, ISP2 (SD-WAN), New CB Series Router, New FPR-1000.I'm basically looking for the best way to set this up with both ISP Links UP and PBR to send ONLY V...
Resolved! FTD NETFLOW CONFIGURATION
Hello,Is it possible to configure multiple Netflow destination in FTD managed by an FMC (version 6.2 to 6.4.0.7) ?Thank you for your feedbackBest Regards
