Hello, DMZ Web server can open External Web Server (www.externalone.com), but Admin PC can not open DMZ Web Server (www.theccnas.com) also Net Admin can not open DMZ Web Server. I think routing is working maybe it is something with ACLCORP-ASA 5505.
Forum Posts
I am looking to delete some logs/files from the FTD due to this issue and/or bug. I am not trying to delete anything though that could cause issues. I see most spaced taken on in the /dev/shm/snortWould deleting files from the different instances in...
Resolved! Upgrade the FTD HA pair
Hi there, I'm planning to upgrade FTD version from 6.3 to 6.4. Also, My FTDs is running in HA. As I have checked from the document Upgrading an FTD HA pair on Firepower appliances.After the first FTD was successfully upgraded, Will the upgrade of sec...
Resolved! Access ASDM from different interface
Hello together,I am trying to access our ASA via ASDM from another Interface than the Management Interface.I have multiple subinterfaces and I would like to access from one Host (Host A) behind Interface "test01" to the ASA via ASDM:GigabitEthernet0/...
Hello, Would anyone know if it is possible to import a list of URL's into the FMC? Or do I have to create an URL object for each URL or manually add an URL to each group? I am migrating from a different vendor, and I need to import URL lists. Tha...
Hi all, after a hard reset i try to restore the firepower 1010 from a backup. When the firewall restart i cant deply nothing because i receive this error : Some changes require that inspection engines be restarted, which will result in momentary traf...
Resolved! how to change FMC current Time
i currently have a problem with FMC time, every winter, the time zone in my country changes +-1 hour for several months, but in my FMC, the logs are showing with +1hr of my current time checking this, i notice that my preferences point to the cor...
Hello issue with ftd 1010 unit configured working perfectly but after restarting the unit I received this error from cli “all traffic destined to the ip address of the outside interface is being redirected” I’m not able to access the unit through the...
Hi Guys, I just installed FMCv 6.7 and started a 90 days trial license.FMCv was downloaded from:https://software.cisco.com/download/home/286259687/type/286271056/release/6.7.0I wanted to simulate having a pair of NGIPS in HA so I installed two instan...
We have a FMC 7.01 and we'd like to configure a new interface of the FTD, in this case the inside interface, so we can have ssh access for Management. How coud we enable this option through FMC? We have to configure this in the Platform Settings? Tha...
ERROR: unable to connect to port 8305 (IPV4): Operation now in progressINFO: No IPv4 connection to (FMC_IP)INFO: Initiate IPV4 type connectionWARNING: Unable to connect to peer (FMC_IP)INFO: reconnect to peer (FMC_IP) Anyone seen this?Keep getting er...
Resolved! FMC not seeing HTTP/HTTPS traffic
So i am trying to find out why i am unable to get on a website. I do not see any blocks in the FMC, i don't even see any traffic related to that IP. But when i try to ping it, i see the ICMP traffic in the FMC. Has anyone seen this kind of problem?
We are migrating Data Center (DC) to AWS and have 5525 Pair in DC today. CPU constantly reaching 95% and bandwidth is limited to 1Gig. The migration is going to take much longer that Management hoped due to complex nature of SaaS design. We want to p...
Resolved! Cisco ASA - SSH D(HE)ater remediation
One of our customer's Cisco ASA firewall was found vulnerable to "Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability (SSH,D(HE)ater)" following a vulnerability scan.The CVE could either be CVE-2002-20001 or, most likely, CVE-2022-40735.The firmw...
Hello, Comparing with ASA the procedure for install or renew certificates on FMC is quite diferent. What would be the formal procedure for install a remote vpn certificate over 2 FTD via FMC? The same certificate can be applied to both FTD? Thanks....
