We have a pair of 1150 firewalls running on a stand alone FMC. We're going to be upgrading the FMC first then the firewalls next. Looking at the upgrade path we can go directly from 7.0.4 to 7.2.4. Is that correct? I believe for the FMC we'll want to...
Hello All,Two - ASA 5525-X'sCurrent Version: 9.4(4)20Upgrade Version: 9.14.4I got the zero downtime upgrade steps from here: https://community.cisco.com/t5/network-security/asa-zero-downtime-upgrade/td-p/2154357One thing I'm nervous about is the IP A...
Hello, We are planning to deploy a pair of FTD appliances for one of our customer. We will be running routed mode and will use inline sets for the connectivity. The customer wants to configure SSL decryption for both inbound (for published services) ...
Hello Guys, Does anyone tried to make conditional NAT between different VRFs and is it even supported in IOS ?
In one or more of Cisco Press books, recall seeing the recommendation to not place any 4 tuple packet filtering rules in the main ACP but instead put them in the prefilter policy for performance improvements. In discussing with another FTD practition...
Hi, I need to change the management IP of both FTD running in HA and FMC will be the same. Please suggest how to do it best way, as after de-registering from previously IP from FMC, we need to re-register to FMC with new IP.
Hello All,We have added FTD into FMC Device management. There is no Data being shown in FMC Dashboard. Could you please let us know how to get Data (Users/ Activity/ Active sessions) in our Dashboard.Your help will be very useful to us to analyze the...
Hi,We have changed the FMC password from GUI. We are not able to access CLI with local users and showing 'Access Denied'. Previously we could access with same password of GUI.We don't have any LDAP or RADIUS. Please guide to solve this issue.
Hi,I would really appreciate someone's help. I spent too much time and having no clue what's wrong..I have a setup of simple lab in EVE-NG. I've added a static IP to Firepower6 FMC (version 7.2.0) and works normally. I've tried adding a static IP and...
Hi,i tried to get a grip of cisco's semgentation solutions. i'm a bit overwhelmed by the information and don't know what to make of it. could someone please explain to me in simple words what trustsec and secure workload are and what their primary us...
I need to test to see If I'm still mapped to the Vlan after having removed the AAA mapping for the AD group I am mapped to. Ill verify the AD group used to map to ASA group Policy. Where do I go in ASDM to remove the AAA mapping for the AD group I am...
Hello,I am trying to connect to Firepower through our web gui and I keep getting a time out. I was unable to access our FMC to restart because our CPU was at 100%. So after adding more memory that fixed that issue but after restarting services I am s...
I have a couple other posts on this topic for ISE and FMC, but have decided to split them up so not to mix up answers for the different technologies.The server team will be replacing the existing AD servers with new ones shortly. The new servers hav...
Hello all, I have an issue regarding traceroute result "time out" passing through ASA to outside (public). I have two public ip addresses at ASA, one is assigned at outside interface which translate (NAT) for some networks (192.x.x.x/24). Another one...
Hello guys I need your help, I already have my firewall configured, but when in my Google browser (firefox, chrome and microsoft edge) I write my ip that I configured in the interface and connect with an ethernet cable, it does not respond. In the CM...
