Hello All,In my current work environment we use GRE tunnels with a IPSEC backbone. we have many branch offices and we use X509 certs to authenticate across the board. Our HQ has established tunnels with all other nodes and we have connection the the ...
Forum Posts
Has anyone reading this ever needed to set multiple communities for a BGP route on FTD or ASA?IOS-XE allows the setting of multiple communities in a route maps with the list being separated by spaces:route-map SET-COMMUNITY permit 10 match ip pref...
Hello,I am currently trying to setup syslog events for CLI logins either via ssh or console, we would like to see all successful and failed attempts.I made an event for 605004-5 & 611101-4 ID's but it looks like that just tells all logins to the FMC ...
Resolved! How to show age of an ASA
Hello, I know that it's possible to know the age of a switch with its serial number But how to know the age of a CISCO ASA? The serial number of an ASA does not have the same form.
Firewall Management Center Version 7.6.5 (build 106) OS Cisco Firepower Extensible Operating System (FX-OS) 2.16.1 (build 147)I have noticed today very slow web interface ... Health Monitorgrapthics are cutted, or "no data available"Then i caught a ...
I'm looking at connecting an ASA cluster to a CheckPoint firewall cluster and told it will work.I've configured one interface on the ASA (inside) and cabled it up to go direct to an interface on the CheckPoint firewall (both have an IP in the same su...
I am experiencing an issue with the software image on a Cisco Firepower 1010 device. After performing a factory reset, I accidentally erased disk0:, which resulted in the loss of the system image. As a result, the device can no longer boot and is cur...
Hi all,In FMC, both IPS and Security Intelligence (SI) can be deployed in a detection/monitor-only mode for tuning and false-positive validation before enabling blocking.In FDM, I can only find a Detection mode option for IPS. SI appears to be block-...
Hello Cisco Community, Is it possible to run SOAR from Qradar to block IP on FTD. Also is it possible to import the feed (List of IP that we wants to block) for IP blocking?So currently our FTD is Registered on FMC, and we made rules on Access Contro...
FP-4115 running FXOS 2.17.0.518 and vASA running 9.18.4.67. Target vASA version 9.18.4.135. Is this target version the latest one supported for First-Gen FP-4115 with FPR4K-SM-24S ?
Hello,I've two old ASA5505 that I believe are security plus licensed.But i've lost the power outage (that is special 48V) and can't start them anymore to enter a "show version" and verify it.Someone wants to buy them but would like to have a proof th...
Hello, I would like to understand what the difference is between the two types of backups offered in the FMC. For the FMC configuration backup, I understand. But what is the purpose of backing up the devices? Since the configuration is managed by the...
I’m currently running a Cisco ASA 5506 on version 9.8(2), but I’m unable to use the Policy-Based Routing (PBR) commands. I can see options like policy-list and policy-map, however the policy-route command is not available to apply on the interface.Co...
I inherited a Firepower FP4110 that is running the latest version of FTD 7.0.9.1.13 but the FX-OS is version 2.10.1.159 (released in May 2021). For compliance purposes, I have been told to upgrade the FX-OS to the latest version 2.10.1.383 (released...
Is this CSCvn31571 a bug or by design that I can't have duplicate VLAN-ID on 2 or more sub-interface?
