hii use FMC 6.4.0.4 (vm ) for 2 FTD Cluster (6.2.3) afew days ago i took some alarm in fmc "mongo terminated unexpected " and i recognized it be create file every 5 minutes in /var/opt/lamplighter/data/journal/ that cause my FMC disk be full . at las...
Forum Posts
HejI configured a FTD HA pair on FMC with IPsec encryption. However, I want to remove the IPsec encryption between the 2 FTD. I have suspended the HA but still can not find the option to disable it.How can I do it in FMC?Regards
Hello Cisco Community, Currently i'm having problem with pinging from inside (PC) to DMZ (router dmz) through ASA. the packet always stuck at ASA when the dmz router wants to send it back. I also already configure the default route for DMZ router.Can...
Resolved! WAF in FW ?
HelloI have a very important questionI worked on security projects in Cisco and Fortigatequestion : i want to know if FW cisco have WAF : yes or not ? if yes how ?and also of FW fortigate have WAF ?i wait a reply from expert securityThanks
Resolved! RAVPN FTD not redirecting to SAML
Hello everyone.I have configured my RAVPN connection profile to leverage SAML. I have configured it with the correct SSO object. I've verified the Azure AD Identifier, Azure Login and Logout URL's. When I connect to the VPN headend (FTD) with AnyConn...
CISCO Secure Web Appliance "CSWA" . it have an engines for Cloud Access Security. on the book OCG 350-701 page 643it talk about that, but it is about 3 line and I am really lost. my question is Cisco Clouldlock is part of CSWA, or it just send the in...
Battling the 3110 upgrade from 7.2. to 7.4. (brand new install, no config on it at all other than an IP address).tftp, sftp, scp, usb downloads all fail. Rommon also failsThe transfer Rate never increases from 0.00000Eventually it failsCisco_FTD_SSP...
Hi Experts, ISE deployment: 1 Node (PAN/MNT) | 1 Node (PSN) [version 3.2.0.542 patch 3] I've setup everything as per the guidelines. How To: Agentless Posture Configuration, validation & Troubleshooting - Cisco Community I've attached the errors. Ev...
Hi,To give something to the community, because it helped me today: I wrote this script to help in recent DDoS attack of our ASA firewalls. It can read list of IP addresses via HTTP URL or from local file and update defined object-groups on multiple A...
Resolved! FirePower Realm is misconfigured.
So new too Firepower but if figure this isn't normal? It pops up every day, but nothing seems to be broken. We are a hybrid AAD setup, but we use LDAP to sign into firepower though. I did not set this up so not 100% sure about all these configuration...
Dear Good People,We have a scenario like below :Our main goal is to configure NAT on FTD-1000 via FDM to translate multiple address to a single public ip address. Please guide us to configure on FDM. And can we apply PAT overload on FTD same as route...
Hello Guys Kindly check attached scenario and please advice how i can design and configure DR site ftd firewall Do I required separate fmc for DR site FTD ? if not required how I will register DR site ftd in Head office fmc ? Can I manage DR site ft...
Dear Communitywe want to deploy firepower 3105 - ver 7.3.1 between distribution switch and core switch along with vlan tagging from both sides means vlan tag can be carried from distribution to core and from core to distribution for this purpose we c...
Hi,I have noticed that fmc ui (in analaysis ) e.g. checking elephant flows shows data in bytes..similarly many command that i need in ftd cli give output in bytes and bytes per sec .. e.g show traffic etc Is there any possibility to change them to ...
Resolved! CSWA transparent mode with L4 switch
for CSWA cisco secure web appliance in transparent mode.I know that you have to implement L4 switch and create a policy? I don't know why, can someone please get me a explanation why.
