Hello Team, on site A i have one virtual fmc managing 2 physical ftd - site A, and one virtual ftd site-B. Both ofcourse have different policies since they are in different sites.I have introduced a virtual fmc on site B, and would wish to have virtu...
I am looking into purchasing a ASA 5585-x with ssp 60 and 10,000 Anyconnect Premium Peers. If these are an Anyconnect Premium license instead of an Apex will it not work? Or will it have less features. I have tried searching on the subject but there ...
Firepower-WHat is AD group limit capacity which can be included via AD. It's not downloading completely due to large numbers. I also need to know, what is the per-user limit for each AD group? AD grp - around 60k on AD side.
Hi All, Can we Rate limit/Bandwidth restriction on the traffic based on the physical interface of firepower with FTD image.RegardsBinay
Hello,We have Cisco Firewall 4215 in one of the sites and we need to get Fortigate firewall in another site with similar specs.Appreciate if you can support which fortigate Firewall series is equivalent to the 4215 Cisco FirewallThank you,
We used the migration tool to migrate our ASA config to FTD, Auto assigned the zones and Interface groups. When we try an create a new ACP rule, we're not seeing the zones or any of the objects that was migrated over. We can see the all the objects...
HiI have 2 x Firepower 2110 ASA Transparent mode Firewalls connected to each other. The Firewall are used to create 3 levels of Security Zones for Servers. Layer 3 will collect updates from the internet. Layer 3 will then copy the updates to Server i...
Hi,We have faced a wired issue. Suddenly our FMC got stuck and not able to login. We have tried to reboot the FMC but no luck. Also we don't have any recent config backup of FMC. Now, if we build a new FMC and register with FTD. Can we migrate the co...
Hello,We were impacted by the vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h, and following recommendations from the TAC, I had to update my pair of ASAs from version 9...
This is a very strange one, Our SSL inspection suddenly started to fail across our (ASA+SFR) environment. - We deployed SSL inspection about 2 years ago, and had no issues till now. The Symptoms we're seeing are - Under the events: SSL Flow error: ...
HIBit of a weird question, when I initiate an upgrade of an FTD 2100 from FMC, does the FTD stop forwarding straight away or does it have to get to a point in the upgrade before it stops forwarding our tr
Hello Guys,Am setting up cisco asa 5555x, needed help with mgmt setup and be able to ssh from a different subnet.have configured mgmt interface, give security level 100, /24 mgmt subnet. it can pick its default g/w but nothing else outside the g/w.wh...
I learning how to set-up firewall and came accross such a problem when trying to connect through web-browser to DMZSERV : 3. The packet is coming from an outside network. The device looks up its NAT table for necessary translations. 4. The packet is ...
Hi, I'm looking for documentation with general tips on how to optimize FTD performance like using prefilter for trusted traffic, disable inspection on encrypted traffic etc. I'm working with a customer that have performance issues a few days every ye...
Hi Community,i do have an ASA 5516 and can see an active connection from the source adress 10.88.72.11 which is causing several GB of ICMP Traffic to one of our internal IPs.The strange thing is, I cannot find this address either in real-time log or ...
