Hello,I ran the following packet tracer using a destination on the Inside with private IP and I'm trying to understand what rule its specifically referencing when it say's the flow was dropped. firepower# packet-tracer input outSIDE udp 69.185.96.215...
Forum Posts
hi,i need to add an additional VLAN in the FW "inside" interface to a switch. but currently the switch is configured to a single VLAN 30 and will need to configure as trunk.i only have IPsec VPN via internet to this remote site using VLAN 30 on the "...
Hi All, For a Firepower 4140 HA pair, is there any way we can get the FXOS management IP address if we have access to the virtualize FTD CLI or FTD GUI through the FMC? I asked the support team for it, but I was told thats not possible. If not, woul...
Can someone confirm my understanding of HA in a multi-instance environment on the 3100 platform.Am i correct in the thinking that an Instance isn't shared across a HA group?Going by the HA setup GUI it would appear you need two instance one on each c...
Hi,pinging a VRF interface is not possible on FTD. Is this a feature?Pinging from VRF to somewhere works, but if you try to ping a VRF from outside, it's dropped by "implicit rule"? Phase: 5 Type: ACCESS-LIST Subtype: Result: DROP Elapsed time: 122 n...
Resolved! Cisco FTDv -- How configure NTP via CLI
Hi Team: I am lab with FMC & FTD, I have FTDv installed in Esxi and chosed to use FMC, and also configured manager with registration keybut when I tried to add the FTD on FMC and failed, recommand error could be the time not syching with the same NTP...
HiWe are using Cisco switch Nexus 3548X and wondering if it's possible to use passwor
Anyone else experiencing a very long boot time for first time install of a 3110?I mean you could go on holiday and it wouldn't be done by the time you came back.I got to the ftd config wizard to set the IP. Then it told me mid way through it was goin...
is there a way to migrate existing SNORT2 rules to for example im looking at SID 1:62681,SID 1:62682,SID 1:62683,SID 1:62684 they appear on SNORT2 rule but not on SNORT3 so is there a way to migrate this rules? this are on the category malware-other ...
Resolved! Routing issue with dst nat - ASA
Hello! and I hope someone can help me.As part of delivering a service to our customers I had the need to nat their destination (as well as our source). However, two different customers wanted me to nat their end and later noticed they use a similar I...
Hello,We recently purchased and installed a Firepower 1010 in a remote office intending to have VPN with the headquarters. At that remote office we have two vDSL lines which a providers router for each line. Each router has a cable connecting to an e...
Hi All . What is the alarm clear after Smart License out-of-compliance or authorization expire or other error message from smart licensing ? %ASA-3-444303: %SMART_LIC-3-OUT_OF_COMPLIANCE %ASA-5-444305: %SMART_LIC-5-AUTHORIZATION_EXPIRED: Authorizat...
So - I'm trying to find the changes my team did last night (non-prod environment) and I thought I could head to the syslog (Gear in top right ->Monitor->SyslogNow as expected I'm seeing tons of logs from this morning. I was hoping to skip like 15 pag...
Hello. Regarding the ingestion of 3rd party threat intelligence feeds, what is the difference between using Security Intelligence (under Objects / Object Management) and Sources (under Intelligence)? Is one better than the other for the ingestion of ...
Hi,We have been experiencing extremely slow performance in the GUI of our FMC recently. It takes an age to change screens and deploy policy changes.The management centre is on a hardware (1600) platform so the issue is not one of adequate resources i...
