Hi I have a Cisco ASA filling up our logs in thousands. Below is the error.I've been through the article https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog/syslog-messages-201002-to-219002.htmlBut I do not understand how to stop these...
Forum Posts
we have many deterrent FW, all of types I worked in have two options for the configuration, GUI of CLIbut in Cisco FTD there is no CLI option, which is make it very hard to add a long object of dynamic template for exampleany solution for this weak p...
Resolved! HA on FTD
Hi,We have a greenfield project in which we are implementing FTD.Let’s assume I have configuredActive : 192.168.75.10standby : 192.168.75.11FTD will connect to the SDWAN cedge devices (HA).connectivity is as below:SDWAN edge router (HA)—> FTD —> Core...
Morning/Afternoon/Evening AllFollowing on from this convohttps://community.cisco.com/t5/network-security/firepower-1010-fqdn-resolve-issue-for-cdo/m-p/5000631#M1108175Ended up doing a factory reset and starting again (before i go completely insane wi...
Can some please post the CISCO Study Plan for the new 350-701v1.1 thank you .
Dear Folks, After quite long time I am seeking some help from Cisco community I have few Qs on FTD & FMC1. In Cisco, there is two types of HA[except Cluster] A/A and A/S in both cases there is no concept of VIP/floating IPs? Instead We suppose to co...
Resolved! firepower crontab
hi all, I am trying to make a firepower using FDM automatically backup its config files to our backup server. I have accessed it using the root shell, and made the script and tested it works as expected and it does. However when i put it into /etc/cr...
Hi Community, I want to configure new implementation to route certain source traffic via different interface. I have 2 OUTSIDE interfaces and 2 interface inside. I want to divide the outbound traffic via WAN and O-365. Load balancer will determine wh...
Cisco FMC/Security Team,Any plan to enable tacacs+ on FMC/FTD, other competitor support tacacs+. We are pretty surprise & disappointed that until now this feature is still not supported.
Hi all,I am running FMC 7.2.4 that manages a pair of 2140 FTDs used for dedicated VPN connections (remote access and site-to-site). Yesterday I made an attempt to configure a route-based VPN to AWS and mistakenly added the VTI to a security zone (VP...
Hello We have ISE and FTD for vpn users. And we want to configure OTP via DUO. After Configuration we found that user is not checking in ISE. We try with incorrect password and disabled user but were able to connect using OTP. Looks like user accoun...
Hello everybody, our customer has a cluster of two Firepower 1120 runnig rel. 7.3.0-69 with FDM. I wanted to upgrade the cluster to rel. 7.4.1. I downloaded the file from CCO and uploaded it to the standby device. There were no open deployments. The ...
Resolved! Ikev2 Tunnel status " Ready "
Dear Experts!I am beginner with vpn configs. I am trying to make tunnel up and ive done all configuration required from my side. After all, it showing many tunnels with status "ready". I dont know what is the issue! My device is cisco ISR4321/K9 ,, ...
いつもお世話になっております。 当方の環境において、アウトバウンド向きでhttps通信を行うクライアントがあり、ASA越しで通信を行っています。 イメージ的には、<クライアント>----<ASA(Firepower1120)>----<ルーター(C891FJ)>---<インターネット> 上記のような環境で、クライアントからインターネット向きにアウトバウンド向きでhttps通信を行います。 現状、ASA上でACLはアウトバウンド向きでhttps permitを行っており、戻り通信はinspecti...
Hello I want to implement Duo integration with your Cisco Firepower Threat Defense (FTD) SSL VPN to add two-factor authentication to AnyConnect VPN logins.without using ISEThis Link ( https://duo.com/docs/cisco-firepower ) describs steps on how to d...
