Could anyone explain me the packet flow especially with those nat statements and how crypto acl is checked. Chatgpt isn't helping a lot. I do understand how twice nat works from asa1 but un-nat at asa2 is still something I couldn't get. Also how cryp...
Forum Posts
Hello everyone i want to configure identity policy on FMC with Active Directory Kerberos, on guide written The Realm you select must be configured with an AD Join Username and AD Join Password to perform Kerberos captive portal active authentication....
Resolved! FTD BGP Question
HiIf I have a route based VPN configured on my FTD and I want to run BGP with the peer device then what IP address do I use for the peering is it the peers VTI IP or the peers interface IP address please.?? Thanks
Hi,Is it possible to create groups of SGTs to facilitate the creation of firewall rules when multiple SGTs need to be added?Regards
Hello, I am running a lab in VMware with two Cisco Firepower Threat Defense (FTDv) devices managed by Cisco Firepower Management Center (FMC). All on version 7.4.2 I created a new IKEv2 policy and IPsec proposal in FMC and deployed the changes to bot...
Hi All, In the event that the admin user needs to be reset on the FDM, the following procedure can be followed. One of the basic requirements is to have a user on which to log in, and it must have conf privileges. Once you have logged in via external...
Hi All, We are managinfg FTDs using FMC running 7.4.2 Is there any option to revert the saved changes which are not deployed to FTD yet.
Hi everyone! I am planning to decommission and remove my internal Fortigate firewall and migrate some of its configuration to Cisco FPR with ASA. I would just like to ask for some feedbacks or insights1. What critical settings or config should I che...
I've already added some new subinterfaces on Cisco Firepower 3130 (with FMC).But for my newest interface I see method "manual" instead "CONFIG" with CLI command show ipAnd again I get the info message "subinterfaces are not receiving any packets" in ...
I have a ASA5555-X that is used in router mode. How can I change the device back to a regular FW? Will I have to baseline the device then start over? Is there a way to remove the routing Protocol? Can I do this without losing my present configurati...
Hi All,Can anyone know where we can get FMC 6.2.3.83 exsi file download link. One of our customer FMC got crashed. We have a backup which is collcted during the last commit did by customer.
Resolved! Firewall Basics on C1111 Router
Can someone please help me understand the basic firewall configuration on the C1111 router. Cisco adds the following during initial configuration through the GUI.zone security INSIDEdescription Zone for inside interfaceszone security OUTSIDEdescripti...
Dear Cisco Community,2 PFR 2130 are connected, both running the 7.0.1-84 with VDB 338.0. Trying to create the HA via web, an HA Join Deployment error is displayed so, it is forbidden create the HA. Trying other tasks (i.e., create manual backup or se...
Hi,We have a hierarchical access policy where the parent policy is applied to some firewalls and child policy to others. On the parent policy we have some rules with IPS functionality enabled and all the firewalls associated to the parent policy have...
Resolved! ASA-AWS API image
Greetings, I've subscribed to a PAYG virtual ASA in AWS, however it does not include the API image by default and I don't have a means to download it as this is the only ASA we have. Is there a means to obtain the API image due to my subscription?Th...
