Need to setup control plane blocks for two OUTSIDE interfaces.Only have production ASA's running 9.1.x so can't "try it out".Will the below work, or is there an easier method?BLCKCOUNTRY is an object group (not shown) with 200 subnets to block.10.11....
Forum Posts
I have configured a rule in the Default NAC that is supposed to block a Layer 7 protocol application. When I analyze hit counts, it shows the rule has been matched. And when I analyze connection events, the traffic is showing as dropped. This is the ...
Dear members, I just logged on to the firepower management center and noticed that its failing deployment for the below firewall and after taking deeper look I noticed the SFR is stuck in Init mode. I tried to reset, shutdown and reload with no succe...
Resolved! Firepower - Max ACL Limits
Hello, What are the ACL limits on the Firepower family running ASA code? I've found documentation regarding the ASA hardware family but nothing related to the new Firepower appliances. I suppose the limitations would be much higher because of the a...
Hi,IF we do not remove packet capture on ASA does it cause CPU to spike?Regards,Krishna
I have firewall FPR 3110 with ASA 9.17, but when I try to do a commit buffer in FXOS mode, a error apear: Error: commit disabled while in appliance mode cisco asa. How can I solve this problem to enable the OIDs to monitor chassis characteristics and...
Hey Guys,I have got a problem with a VTI site to site tunnel we created between two ASA's.The VTI tunnel is up and running and we can use it to access the other site, however on site B we have an extra VLAN which also need access to the subnet on the...
Hi All,in which format we can send logs to any syslog server from FMC4700 version 7.1?Also what are the different type of logs can be Sent to syslog from FMC?
Hello.CyberOps VM in networking academy is not booting from Virtualbox. It will continue to stop in the following states:Please help me.
Hi All, I need to downgrade my lab FTD from 7.2.5 to 7.2.3- (I dont suppose i have revert option as its been more than 30 days). I understand i need to re-image but i have the below options in my firewall. What happens if i do the below? is it the sa...
Hi All, I have tried all forms of sw-module module uninstallresetreloadrecover stoprecover boot (setting the boot image to my .img file in disk0Can anyone help or should I raise a tac case??
HiI have an FMC managed 1140 device on FTD 7.2.4, as of this morning I was able to SSH to it on the management interface, now I am not able to SSH, I also added a policy to try to SSH via the other interfaces but without luck, this is what I get:kex_...
I have some external systems which are sending data to a syslog server on UDP port 514 which is behind an FTDv(v6.6.7.1) which is managed by a Cisco FMC (v6.6.7.1), I have a rule in the ACP on the FTD to allow traffic from these external systems on p...
Hey all I setup smart card 2FA with firepower previously. The way it worked is in order to establish VPN the smartcard was looked at by the anyconnect client for certificate for which a PIN was entered then VPN established. I am trying to do the same...
Hello!I instlled FTDv (7.3.1-19) on ESXI 8.All interfaces down, instead Managemet. On ESXI it configured as VMXNET3.On ESXI side its attach and connected, but on FTDv side its in DOWN status!ESXiFTDv > show interface ip brief Interface IP-Address OK...
