Good morning, Could someone please explain what is the main difference between the cloud management SKU (L-FPR1010-P=) and the cloud management SKU with via CDO (CDO-BASE-LIC) ? I can't figure out if these need to be ordered together, or are they di...
ouch, posted in wrong forum.I have tried using the platform settings ICMP options to let windows traceroute out to the internet, failed.Another fp admin shared me these rules below. They work, but what else do I need to do to make them secure? These ...
Hello, I have some issue sending LDAP request from a FTD 1010 device managed by FMC to an AD server over a VPN tunnel. I have already added the AD server as a Realm in the FMC and verify that the connection from the FMC to the AD Server works. Also, ...
Hi everyone!Good day and greetings! I am having a hard time digging into the files of my FMC azure and I really cannot find the files that Microsoft has been telling me affected.For context, some of the files of my FMC Azure has been flagged with Pho...
Hello everybody, our customer has HA pair of two Firepower 4115 running rel. 7.4.2.1. TheFMC is running rel. 7.4.2.1 too. We found a message that the failover will not working because interfaceEthernet1/7 is DOWN on the standby unit (see screen dump ...
How long does it take to check the data base tables? Yesterday I installed the FMC KVM, still the system checks the database.("Database tables are still being checked, Proccess Manager will not start"), Respectively, of WEB GUI is not available. Is t...
We have deployed Cisco Cyber Vision (CV) Sensor and Secure Equipment Access (SEA) Agent on five Catalyst 9300 switches. Currently, three switches are running both the CV sensor and SEA agent without any issues. However, the remaining two switches are...
Hi all, I’m looking for clarification on how an ASA management‑only (OOB) interface behaves in the following scenario:If traffic first traverses the ASA data plane, and the ASA routes it out normally (because a route and policy allow it), and that tr...
We are planning to upgrade our Firepower Management Center (FMCv) from 7.4.2-172 to 10.0.0-141. Our application uses the FMC REST API only (no UI automation) and we need to confirm compatibility before upgrading. Current usage:Auth: fmc_platform/v1 (...
I am having some issue understand of ASA to-the-box filtering. So in my topology below I tried to stop icmp packet to the outside interface of ASA.R2 has the ip: 23.1.1.1ASA out interface : 23.1.1.2access-list cp extended deny ip host 23.1.1.1 anyacc...
Hey all,Does anyone have experience using the Threat Defense Model Migration? We are migrating from a 2110 in HA to a 3105 in HA. We are debating whether to do this manually or is it less error prone to use the migration utility built into FMC?Thanks...
HiIs it ok to have two interfaces in different security zones in the same vrf, So traffic comes in on a sub-interface in security zone(visitors) then egresses through a RB VPN VTI in security zone(guest-inet) is this ok or should i be doing it a dif...
HiI have been labbing this up and have come to the conclusion that when using FTD PBR a default route is still required, I have tried everything and without a default route traffic is routed via an interface not stipulated as (egress interface) in t...
I originally never setup the mgmt interfaces until the first firmware update when i found i needed to get into the standby fw as well. So chose two IPs from a random unused subnet. (172.16.16.x). The mgmt interfaces are only used when i am on sit...
Hello, Every time I use FMT, it seams like the tool automatically create interface groups which I don't want to use. I want to use interface zones and no interface groups. To remove the interface groups after a migration, I first need change all conf...
