Hello everyone,I am troubleshooting a strange issue on a 4-node ASA cluster running on Firepower 4110 appliances.Environment4-node cluster across 2 data centersPrimary DC: FW1 / FW2Backup DC: FW5 / FW6Through traffic is designed to prefer the primary...
Forum Posts
Good day,I am trying to police or shape traffic on ASAv Anyconnect.We have 10 Group-policies and 10 Tunnel-groups.I cannot limit bandwidth on certain group...tried with matching ip pool, got an error! access-list EXT_LIMIT permit ip 10.128.255.64 255...
HiOur consulting company currently manages our FTD using their shared FMC, which they also use to manage many other clients. I am planning to migrate to my own Cisco FMC appliance so I can manage my FTD directly.Since we have Site-to-Site VPNs, AnyCo...
Hi all,I’m trying to find out if bug CSCwo94394 (“Remove unsafe-inline and unsafe-eval directives from Content-Security-Policy header on VPN web server”) has been resolved in any released ASA version yet.We are currently running ASA 9.22(2) and our s...
HiI need really urgent help. I upgraded our Cisco FTDs to new recommended version but one of them get failed and now it can't boot to system. Even I don't have access to COM and enter to ROMMON mode for recovery. It looks like entire OS failed and bo...
I upgraded (and rebooted) our six Cisco ASAs (FPR-1150 and 1140) over the last few days.But the last device did not come up again.My guess is that there is just a minir issue like "Image not found", thats prevents the boot process.The device seems to...
Hi,We're having encountered this bug here on all Firepower devices: https://bst.cisco.com/bugsearch/bug/CSCwn92248Firepower 1120 (HA active/standby), running FTD 7.4.2.2, connected with 4x1 Gb/s vPC to a pair of N9K-C9348GC-FXP, running NXOS 10.2(4)F...
We are noticing that some of our MAB (MAC Authentication Bypass) devices, primarily printers, are intermittently losing their static endpoint group assignments in Cisco ISE and reverting to the default or "Unknown" profile. We have already verified t...
Hi, When users are trying to get connected to VPN from Remote machines. They are getting below Err. Some one could help me in fixing this issue by command line. "VPN Establishment capability from a Remote Desktop is disabled. A VPN Connection will no...
We have two Cisco FTD 1140n (version 7.6.4) managed by a FMCv (version 7.6.5). We have the the threat, URL filtering, and Malware licenses installed and we use snort 3. We are using the most recent VDB. We block all countries but the US. Are there an...
am running a Cisco Firepower 1120 (FPR-1120) with ASA software, managed via ASDM 7.24.I am getting the following error when trying to PXE boot a client over a site-to-site VPN tunnel (tunnel1"Fragment queue threshold exceeded, dropped UDP fragment f...
Hi, I am migrating an ASA firewall to FTD for a customer and one of the things that need to be migrated is a QoS policy that limits the bandwidth for a number of VLAN:s that’s behind the ASAs inside interface. In the ASA the policy looks like th...
Good day. I encountered the following issue with posture for RA VPN: "Cisco Secure Client scanning is being bypassed. Your network is not configured to use the Cisco ISE Posture Agent." This issue occurs on Windows 11 LTSC.On Windows 11 Pro, posture ...
Hi all: I want to export all the detail information like the IP address, host name and description of the Network Object and Network Object Group from CiscoASA ASDM but cannot find a way from ASDM. Can somebody suggest any way to export all this info...
Hello community,I have 2x FPR1120 and built HA between them. I am managing it with FMC which is remote to them therefore I am using outside internet to connect FPR to FMC.I am using data interface as management.I have a possibility to have backup ISP...
