I randomly keep getting the following on my Firepower console "Deny IP due to Land Attack from <outside port IP> to <outside port IP>I have read a few threads about this and using the information I have not found the source or cause. This just starte...
Forum Posts
I am planning to migrate one FTD from One FMC to another FMC. 1st questions , if I deregister from FMC at that time after deregister I guess still there will be no outage ? Also I will re-resister from the new FMC and push the policy will it break t...
Hello all Can anyone advise on the FTD’s capability to detect and mitigate DNS exfiltration attempts? Would there be a SNORT rule to detect such activity? Thank you.
Hello,I am trying to access & control a Cisco ASA 5505 firewall via console access. The problem is that I do not have a working enable password and I need to reset it. I've checked the Cisco manual and other various posts online and these are the ins...
Hi I have a Cisco ASA filling up our logs in thousands. Below is the error.I've been through the article https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog/syslog-messages-201002-to-219002.htmlBut I do not understand how to stop these...
we have many deterrent FW, all of types I worked in have two options for the configuration, GUI of CLIbut in Cisco FTD there is no CLI option, which is make it very hard to add a long object of dynamic template for exampleany solution for this weak p...
Resolved! HA on FTD
Hi,We have a greenfield project in which we are implementing FTD.Let’s assume I have configuredActive : 192.168.75.10standby : 192.168.75.11FTD will connect to the SDWAN cedge devices (HA).connectivity is as below:SDWAN edge router (HA)—> FTD —> Core...
Morning/Afternoon/Evening AllFollowing on from this convohttps://community.cisco.com/t5/network-security/firepower-1010-fqdn-resolve-issue-for-cdo/m-p/5000631#M1108175Ended up doing a factory reset and starting again (before i go completely insane wi...
Can some please post the CISCO Study Plan for the new 350-701v1.1 thank you .
Dear Folks, After quite long time I am seeking some help from Cisco community I have few Qs on FTD & FMC1. In Cisco, there is two types of HA[except Cluster] A/A and A/S in both cases there is no concept of VIP/floating IPs? Instead We suppose to con...
Resolved! firepower crontab
hi all, I am trying to make a firepower using FDM automatically backup its config files to our backup server. I have accessed it using the root shell, and made the script and tested it works as expected and it does. However when i put it into /etc/cr...
Hi Community, I want to configure new implementation to route certain source traffic via different interface. I have 2 OUTSIDE interfaces and 2 interface inside. I want to divide the outbound traffic via WAN and O-365. Load balancer will determine wh...
Cisco FMC/Security Team,Any plan to enable tacacs+ on FMC/FTD, other competitor support tacacs+. We are pretty surprise & disappointed that until now this feature is still not supported.
Hi all,I am running FMC 7.2.4 that manages a pair of 2140 FTDs used for dedicated VPN connections (remote access and site-to-site). Yesterday I made an attempt to configure a route-based VPN to AWS and mistakenly added the VTI to a security zone (VP...
Hello We have ISE and FTD for vpn users. And we want to configure OTP via DUO. After Configuration we found that user is not checking in ISE. We try with incorrect password and disabled user but were able to connect using OTP. Looks like user accoun...
