Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...
Forum Posts
Hello issue with ftd 1010 unit configured working perfectly but after restarting the unit I received this error from cli “all traffic destined to the ip address of the outside interface is being redirected” I’m not able to access the unit through the...
Hi Guys, I just installed FMCv 6.7 and started a 90 days trial license.FMCv was downloaded from:https://software.cisco.com/download/home/286259687/type/286271056/release/6.7.0I wanted to simulate having a pair of NGIPS in HA so I installed two instan...
We have a FMC 7.01 and we'd like to configure a new interface of the FTD, in this case the inside interface, so we can have ssh access for Management. How coud we enable this option through FMC? We have to configure this in the Platform Settings? Tha...
ERROR: unable to connect to port 8305 (IPV4): Operation now in progressINFO: No IPv4 connection to (FMC_IP)INFO: Initiate IPV4 type connectionWARNING: Unable to connect to peer (FMC_IP)INFO: reconnect to peer (FMC_IP) Anyone seen this?Keep getting er...
Resolved! FMC not seeing HTTP/HTTPS traffic
So i am trying to find out why i am unable to get on a website. I do not see any blocks in the FMC, i don't even see any traffic related to that IP. But when i try to ping it, i see the ICMP traffic in the FMC. Has anyone seen this kind of problem?
We are migrating Data Center (DC) to AWS and have 5525 Pair in DC today. CPU constantly reaching 95% and bandwidth is limited to 1Gig. The migration is going to take much longer that Management hoped due to complex nature of SaaS design. We want to p...
Resolved! Cisco ASA - SSH D(HE)ater remediation
One of our customer's Cisco ASA firewall was found vulnerable to "Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability (SSH,D(HE)ater)" following a vulnerability scan.The CVE could either be CVE-2002-20001 or, most likely, CVE-2022-40735.The firmw...
Hello, Comparing with ASA the procedure for install or renew certificates on FMC is quite diferent. What would be the formal procedure for install a remote vpn certificate over 2 FTD via FMC? The same certificate can be applied to both FTD? Thanks....
Hi -I have a Cisco AIR-CAP-2602i-A-K9 unit that needs the security update as outlined in Cisco security advisory cisco-sa-20171016-wpaURL is here: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpaThis...
Resolved! Switchport Trunk Security Concerns
We are discussing the best way to place PCs onto their desired VLAN. It has been offered that we make all switchports trunks and do VLAN tagging from the PC NICs. How dangerous is this from the perspective that all switchports would be trunks?
Hello, As you can see in the title, I have to migrate a (huge) configuration from FWSM OS v4.1 to ASA OS v9.6.1 on Firepower 4100. I found the FWSM to ASA-SM migration tool - which translates the configuration to ASA-SM OS v8.5 - here: http://www.c...
Resolved! ASA Firewall
Hi, I'm having a lab here which to design and create for a Clinic Network Environment that having access from Internal Network to External Network. When come to set for my Wi-Fi for Visitor Access-Points I was confusing above the ACL which I need to ...
Dear Community,We have HQ Site & 2 remote offices Site-A & Site-B. All 3 site are connected within MPLS managed cloud. We are seeing the Connection loops of the internal LAN subnets of Site-A & B on the outside interface of HQ firewall(Cisco 5525-X)...
I'm trying to connect to the FTP server, but it gives me "connect failed" How to fix this problem?
Hello All, We are installing an infra-considering log collector server and analyzers for one of our customer's DC and DR locations. The scenario is Customer is going to push/inject logs from their side on UTM_3200 FW to our end Dell_S4128T-ON L3 swit...
