Firepower FTD CPU 07 spiked to 100% earlier today. And it corresponds to the same time there was a spike on snort03. Snort-busy Frame drops - Snort busy started averaging 100 drops/sec.Is there a way for me to identify what traffic may have started t...
Hi All,I have been having a hard time to integrate ISE with my Cisco FTD since most of the articles covers using the FMC. For my FTD device I am using FDM not FMC. What I am trying to accomplish is to block web whatsapps by user usage. I have been ab...
HiWE are going be setting up 12 site to site vpns to a 3rd party provider and they have said they will send us their root cert and we just need to create intermediates for the 12 tunnels from the root cert, is this possible and if so how please.?? Th...
using Ikev2, phase 1 comes up with no issues.PA side is getting "NO_PROPOSAL_CHOSEN".ASA side is getting "IKEv2 Negotiation aborted due to ERROR: Failed to find a matching policy".All our phase1 and phase2 match.yes, PRF is set, I have PRF set for Sh...
Say I have two AnyConnect profiles, one with Automatic Server Selection off and the other with Automatic Server Selection on. If a user opens up AnyConnect, which configuration will be applied to their AnyConnect?
im setting up cisco duo for the first time on asa 5525-x 9.14 . We are currently using anyconnect remote vpn with a tunnel connection profile and a group profile. Can i create a new tunnel connection profile and copy the existing one just change the ...
HelloI have a pair of Firepower 1120 running FTD configured a HA pair and managed locally with FDM. Should I need to manage the units directly, each has a MGT IP and they share the main and standby address on the INSIDE interface:UNIT 1: Management:...
Dear Community, We using Cisco ISE 3.1 integration with AD servers for Auth.C and Auth.Z There have 2 deployment nodes ( Pri & Sec Node ). There have 4 AD servers ( same domain name ). On ISE we join AD DC only 2 AD servers. In case these 2 AD server...
Hi All I am wanting to downgrade my 1150 FTD from 7.2.5-208 to 7.0.4-55Is this a straightforward downgrade via the update section or should I be aware. Many thanks
Dear All, I have two no of FTDs which is I need to configure in HA[A/S] in Date Center. As I dont have FMC at initial stage I am going to use to manage FTD thru FDM[native].Using this FDM I also need to configure interim RAVPN for admin users of vari...
Hi all im trying to renewal the self sign certificate of the ASA FDM by using the following commands at FDM expert mode:openssl genrsa -out privateserver.key 4096openssl req -new -key privateserver.key -out FP5516.csropenssl x509 -req -days 365 -in ...
Is the L-AC-PLS-3Y-S1 tied to just 1 serial number/device, or can it be used across multiple devices? I believe it is the latter - across multiple devices - but I just want to be certain. Secondarily, a related question, assuming we have 25-users (wh...
I have changed management interface IP address. It was using DHCP and i changed it to use static IP address.Now it is not able to connect to FMC. sftunnel.status.pl output is belowSFTUNNEL Start Time: Mon Mar 4 18:55:57 2024Both IPv4 and IPv6 connect...
I am migrating FMC from FMC2500 hardware to virtual, based on the migration path, i must use FMCv300, but it requires 64GB RAM what i am thinking is can I after migrate to v300, then i downgrade the RAM to 32GB since i not managing 300 sensor is that...
Dears, Could you help me how to configure: no logging hide username on FTD Regards,
