SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) in cisco Catalyst 9300 We have run vulnerability cisco Catalyst 9300 and we find the above vulnerability. All software is up to date.#show ip sshSSH Enabled - version 2.0Authentication method...
Forum Posts
Hi guys, i need your help because, despite various posts and documentation, i still can't figure out how to access the CLI of two Firepower 3110 devices (FTD). Over the past few months, I installed 2x Firepower 3110, correctly configured the manageme...
I manage an ISA 3000 firewall running FTD 7.4.2.3-4 using the FDM. This is for a small site with just this one firewall. There is no FMC and we do not want FMC. The device will be managed through FDM. We have all the NGFW licenses for the FTD (IPS/ID...
Resolved! ASA VPN behind Fortigate
Hi,I have two scenario seeking advise:1) to take advantage of Fortigate Geo-Blocking and integrate it with ASA SSL-VPN, I setup ASA behind fortigate like this in a LAB and it works fine. let me know if there is any consideration: - ASA Port 4 as Outs...
Hi to all I have a issue, recently did a PoV for a customer, Entra ID integration whith FTD to applied rules at specific user or groups to block a specific permisson, its applied that normaly applied a source network in this case is a user. When a cr...
Hello all,I am running FTD under FMCv with Cisco 4215 and I notice that the CPUs peak beyond 95% and starts dropping traffic at hundred, while the data pipe throughput is only at 48Gbps as opposed to the 65Gbps advertised by Cisco. Please can someone...
Hi there, I want to install asa code with 9.8.2 on fp2100 to do a lab test,but the ASA 9.8.2 image cannot download yet from cisco website. Could you share the fp2100 asa 9.8.2 image to me ? many thanks.
Hi GuysI am moving away from our ASAs and replacing with Firepower.Do all the remote access VPN functions on the Firepower have parity with the ASA? if not which features are missing and what are Cisco doing about it?Also, are there any new features ...
Resolved! Cisco Firewall Model 1120 and 3105
I have Cisco Firewall Model 1120 and 3105 ,I need to make them run and filter the OT protocols is that feasible? is there any license? what is the price for it?
Resolved! FTD HA Reconfiguration via FMC
Hi,we have 2 FTD 2110 running in HA in the same datacenter with Mgmt IP in the same IP subnet. Failover/Linkstate link is configured on a single port but needs to be on a portchannel in the futureNow we need to move 1 FTD into another datacenter on t...
What is the maximum number of BGP Prefixes that a 'large' containerised FTD instance in a FPR3130 chassis can support. I can't find this documented anywhere. I can't just receive the default because there is more going on.
Good day. Remote FTD has a public IP. FMC is in another office and has an internal IP. I am trying to make a NAT translation of TCP port 8305 on FTD behind which FCM is located.I created auto nat rule – static. InterfaceObjects: Source-any, Destinati...
Hi all, I'm having one pair of Meraki Mx place as perimeter firewall and below one pair of FTD fw directly connected to Mx. Need to know how will be my failover works here as Meraki works as warmspare i.e failover would only happen if there's a conne...
We took a pair of FPR1010 running FTD version 6.6 into service.An upgrade to a higher version by FDM or manually wasn't although pre-testing not possible due to an outdated certificate.The upgrade starts but ends in a rollback.Discovering by our virt...
I have several ASA appliances on our production network. We are moving away from Aruba Clearpass and moving to Cisco ISE. This will include our TACACS functionality.I see in the ASA configuration in ASDM where i configure the AAA server groups. I ...
