Hello, Please find the below diagram We have a requirement to shutdown the outside interface of our VPN when the server (192.168.255.1) is not reachable. Basically we are trying to terminate the VPN tunnels when the CORE switch goes down or the ser...
Hi to All,i wonder if anyone can help me understand what is the Network Discovery Only option an the bottom of the ACP.I understand that FTDs can do network discovery by going to another menu in the FMC that is POLICIES --> Network Discovery where y...
Hello Experts Looking to upgrade Cisco ASA code to asa9-14-4-23-smp-k8.bin and associated ASDM. We are also planning to enable Umbrella roaming client option within AnyConnect Package provisioned through ASA. Want to confirm, do I need to anything el...
I have a Firepower 1150 (managed by FMC). For VPN users, it successfully authenticates against RADIUS and uses the result to sort people into their appropriate group policy.What I'm trying to do is to set up MFA on the RADIUS server. For this, I ha...
Hello guysI'm on ASA firewall, to assign IP for two interface- 1-int inside and the other is 2-int outside for inside int 192.168.10.20 255.255.255.0 and outside int 192.168.10.20 255.255.255.0,it pops the below sys log message. Failed to apply IP ad...
Hi All, FP31XX is supporting multi instance deployment (starting from 3110 model if I remember correctly). At the same time FP31XX does not support FXOC Chassis Manager access which is normally used to deploy instances on FP41XX and higher. From thi...
Hi experts,I am using the FTDv to filter traffic between the VPCs. The video I followed is this one - https://www.youtube.com/watch?v=EuXrVc2hpNk&t=14sNow my firewall is receiving the ping packets from the source VPC but it is not forwarding it to th...
Assuming you're using FMC, how would you exclude a given IP address from a specific IPS alert? For example, system traffic was blocked due to a specific malware definition but it was determined that the traffic was legitimate and you only want to ex...
I'm having trouble getting an FMCv managed HA Pair of 2120s ver. 7.3.1 configured for SNMPv3 monitoring via Auvik collector. The Auvik collector are not detecting SNMP as available. I'm using the devices>platform-settings>snmp as my setup per the doc...
Hello GuysWhat is the last product of ASA firewall ? When the ASA is going to be end of life forever. Cheers
I'm in the process of adding more switches to support the FTD 3140 Cluster. Here's the question, won't the Firepower devices go down if the switches that it's connected to also goes down? Wouldn't that make the Switches (even more importantly, the ...
Many Microsoft content items have been flagged as malware in Firepower. Typically, the URL pattern of these files is http://tlu.dl.delivery.mp.microsoft.com/*.Is anyone else experiencing the same behavior?
A pair of Firepower 2140s in HA configuration failover when deploying the VDB updates. Failover history shows:Inspection engine in other unit has failed due to snort failuremy understanding is the deployment will cause inspection interruption but why...
Hi all, I issued the Failover Active on Standby ASA and No Failover Active on Active ASA but both ASA all cannot change the state. At the time after issuing this command, the SSH session on the ASA also drop and has to restart session again. The two ...
Hello,I've tried to look for a solution to this but can't find one for the defense orchestrator. Essentially the users are getting EDT time when viewing the monitoring page within the cloud fmc rather than local time, I know that on the full FMC it's...
