Hello,I've been trying to perform a deployment on the FP1140.The deployment fails and requests a full deployment, which also keeps failing.The error occured when downgrading from Snort 3 to 2.The following log is from the command "pigtail deploy" NG...
Forum Posts
I'm often bitten by this issue:Scenario: When FTD firewalls are set to automatically download and install Vulnerability DataBase (VDB) updates and Vulnerability Research Team (VRT) updates on the firewall, sometimes they will fail to deploy, especial...
Hello,I have an issue that ISE 3.2 (with patch 4) unable to retrieve groups from Azure AD. The REST ID store test connection succeeded. But when I retrieve the group, i got the error message "error processing this request, refer to logs for more det...
Have a pair of Firepower 2130 FTD's in HA, managed by Firepower Management Center. Is it possible to override the rp-mapping learned from the PIM bootstrap process with a static RP configuration?I'm able to do it on the IOS, IOS XE, and NX-OS devices...
I am trying to access the CLI for our FMC instance via vSphere and SSH. When entering the correct credentials the login banner is refreshed / asks for credentials again on vSphere and the Putty session just closes the window. If I enter the credentia...
All, Forgive the newbie here (when it comes to Cisco devices), but our company purchased several ASA5505 firewalls with bundled licenses. My question is, how do I get these licenses? I'm on the license page (http://www.Cisco.com/go/license) but fro...
Hello,I ran the following packet tracer using a destination on the Inside with private IP and I'm trying to understand what rule its specifically referencing when it say's the flow was dropped. firepower# packet-tracer input outSIDE udp 69.185.96.215...
hi,i need to add an additional VLAN in the FW "inside" interface to a switch. but currently the switch is configured to a single VLAN 30 and will need to configure as trunk.i only have IPsec VPN via internet to this remote site using VLAN 30 on the "...
Hi All, For a Firepower 4140 HA pair, is there any way we can get the FXOS management IP address if we have access to the virtualize FTD CLI or FTD GUI through the FMC? I asked the support team for it, but I was told thats not possible. If not, woul...
Can someone confirm my understanding of HA in a multi-instance environment on the 3100 platform.Am i correct in the thinking that an Instance isn't shared across a HA group?Going by the HA setup GUI it would appear you need two instance one on each c...
Hi,pinging a VRF interface is not possible on FTD. Is this a feature?Pinging from VRF to somewhere works, but if you try to ping a VRF from outside, it's dropped by "implicit rule"? Phase: 5 Type: ACCESS-LIST Subtype: Result: DROP Elapsed time: 122 n...
Resolved! Cisco FTDv -- How configure NTP via CLI
Hi Team: I am lab with FMC & FTD, I have FTDv installed in Esxi and chosed to use FMC, and also configured manager with registration keybut when I tried to add the FTD on FMC and failed, recommand error could be the time not syching with the same NTP...
HiWe are using Cisco switch Nexus 3548X and wondering if it's possible to use passwor
Anyone else experiencing a very long boot time for first time install of a 3110?I mean you could go on holiday and it wouldn't be done by the time you came back.I got to the ftd config wizard to set the IP. Then it told me mid way through it was goin...
is there a way to migrate existing SNORT2 rules to for example im looking at SID 1:62681,SID 1:62682,SID 1:62683,SID 1:62684 they appear on SNORT2 rule but not on SNORT3 so is there a way to migrate this rules? this are on the category malware-other...
