Hi everyone!Good day and greetings! I am having a hard time digging into the files of my FMC azure and I really cannot find the files that Microsoft has been telling me affected.For context, some of the files of my FMC Azure has been flagged with Pho...
Hello everybody, our customer has HA pair of two Firepower 4115 running rel. 7.4.2.1. TheFMC is running rel. 7.4.2.1 too. We found a message that the failover will not working because interfaceEthernet1/7 is DOWN on the standby unit (see screen dump ...
How long does it take to check the data base tables? Yesterday I installed the FMC KVM, still the system checks the database.("Database tables are still being checked, Proccess Manager will not start"), Respectively, of WEB GUI is not available. Is t...
We have deployed Cisco Cyber Vision (CV) Sensor and Secure Equipment Access (SEA) Agent on five Catalyst 9300 switches. Currently, three switches are running both the CV sensor and SEA agent without any issues. However, the remaining two switches are...
Hi all, I’m looking for clarification on how an ASA management‑only (OOB) interface behaves in the following scenario:If traffic first traverses the ASA data plane, and the ASA routes it out normally (because a route and policy allow it), and that tr...
We are planning to upgrade our Firepower Management Center (FMCv) from 7.4.2-172 to 10.0.0-141. Our application uses the FMC REST API only (no UI automation) and we need to confirm compatibility before upgrading. Current usage:Auth: fmc_platform/v1 (...
I am having some issue understand of ASA to-the-box filtering. So in my topology below I tried to stop icmp packet to the outside interface of ASA.R2 has the ip: 23.1.1.1ASA out interface : 23.1.1.2access-list cp extended deny ip host 23.1.1.1 anyacc...
Hey all,Does anyone have experience using the Threat Defense Model Migration? We are migrating from a 2110 in HA to a 3105 in HA. We are debating whether to do this manually or is it less error prone to use the migration utility built into FMC?Thanks...
HiIs it ok to have two interfaces in different security zones in the same vrf, So traffic comes in on a sub-interface in security zone(visitors) then egresses through a RB VPN VTI in security zone(guest-inet) is this ok or should i be doing it a dif...
HiI have been labbing this up and have come to the conclusion that when using FTD PBR a default route is still required, I have tried everything and without a default route traffic is routed via an interface not stipulated as (egress interface) in t...
I originally never setup the mgmt interfaces until the first firmware update when i found i needed to get into the standby fw as well. So chose two IPs from a random unused subnet. (172.16.16.x). The mgmt interfaces are only used when i am on sit...
Hello, Every time I use FMT, it seams like the tool automatically create interface groups which I don't want to use. I want to use interface zones and no interface groups. To remove the interface groups after a migration, I first need change all conf...
On the FPR-2110 we may be experiencing an issue with time synchronization that might be preventing SAML auth.In system support diagnostic-cli the clock appears to be several minutes off.When I show time from a regular cli prompt, time shows correct.T...
We have connectivity to regional sites, all terminating at the HQ site. At the regional sites, we have two ONUs from two different ISPs connected to our Cisco Firewall – Firepower 1000 Series (FPR-1010) appliance, which then connects to a Cisco Switc...
Can the Cisco Firepower 1010 Threat Defense process DNS queries?
