Greetings! In this week's What's new in CDO it was announced that the new Cisco Defense Orchestrator (CDO) public API has moved from beta to general availability! You can find the API docs here. There is the REST API, a postman collection, and a pyth...
Forum Posts
A client asks me for a list which URL's are accessed. It has access to more than 40 URLs. I don't want to manually write them one by one from the URL Object. Network objects can be seen very easy in the CLI with the (show object-group id xxx) command...
Hi everyone,I have a client issue where they claim that Cisco AnyConnect falsely reports that Certificate has expired. When I connect with my own AnyConnect client version 4.10.05111, I do not get this false/positive error. Screenshot attached. Inter...
How can I create a report of reconciliation changes from the last 2 weeks in Cisco FMC?I tried to generate audit logs, but the results did not include the change details, as shown in the attached picture.
Hello, I'd like to ask if is it possible to use multiple PSKs in a single authorization profile? This would be beneficial in case some devices like sensors in IOT ISE group require different PSK (reason e.g. requirement of sharing the PSK with vendor...
I have configured NAT and access control on firepower ftd but it doesn't seen to work. I have a draytek router that connects to ISP via PPPOE and my firepower connects to the draytek, on intf1, intf3-8 is a vlan which connects 3 webservers and they a...
Resolved! Peer to Peer traffic through ASA 5516
Hello all,Recently there is a request from my user to use a software "Sonobus" that can allow other users to join together to share their audio recording. This looks like to be the peer-to-peer UDP traffic. Sonobus I decided to go ahead for testing i...
Resolved! SSH Access to ASA
I can't access our ASA 5505 via SSH from the outside. I've configured this through the ASDM to allow SSH (Device Management > Management Access > ASDM/HTTPS/Telnet/SSH). I added a rule that allows SSH on the outside interface from 0.0.0.0 0.0.0.0. Wh...
Resolved! type 6 keys migration
My customer is planning to move from 1941 RTR to C8200 , i found some key "6" PSK for crypto isakmp , Is there a way to migrate those key "6" keys to new router without decrypting those keys ?
Hi Guys, Would like to check about the FTW module of the Firepower. For example, I have an FTD with FTW and inline pair with Propagate Links enabled. If the devices connected on my external interfaces goes down, the FTD will run the propagate link so...
Hi,We have FTD-1000 and two ISPs are connected which we have configured IP SLA as Active-Standby links with setting administration distance for default route. Now we want to make both ISP links in use not active-standby. There is an option ECMP, can ...
I created a FlexConfig using the WCCP Template in FMC to use for Cisco WSA filtering with our FTD Firewalls. The problem is my FlexConfig is only giving me half of the configuration I need. In a preview for FlexConfig I get the "wccp web-cache-90 g...
Hi, I'm trying to get Subinterfaces created via FMC RestAPI but always receiving "BadRequest" response.There is something not adding up which is the fact, "subinterfaces" is available under the "devicerecords", however this is an HA Pair. I've select...
Hello, I have a task to deploy 3105 FTD in HA remotely using FMC. According to the cisco installation guide (https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/getting-started/3100/secure-firewall-3100-gsg/fmc-remote.html), it says we can...
We have 2x FTD 2140 Firewalls Managed by FMC that I am trying to get a flexconfig setup for WCCP to use for our Cisco WSA Web Filter. This should be a pretty simple configuration as I am just wanting to put the following 2 commands in via Flexconfig...
