Dear Cisco Community,I hope this message finds you well.I am currently working on configuring Wake on LAN on a Firepower 1000 series device and could use some guidance on the required steps, including NAT configuration. Here are the details of my ne...
Forum Posts
Hello,Referring cisco document on NAT i would like to know why the acl direction is "dmz_acl in interface dmz" rather than "dmz_acl out interface dmz" as the communication is from DMZ to INSIDE object network dns-server host 192.168.0.53!access-list ...
Hey everyone, Just wondering if anyone knows where to send the Netflow collector on a cloud-based wireless controller (such as Meraki for example). Would we send it to an on-premise Netflow collector? If it is on-premise, would the Netflow be encry...
Firepower remote access vpn 2 factor with DUO AD serverDUO Auth server with ubuntu 22.04FTD and FMCWidow 10 DUO installation on ubuntu as belowReference as below but I would like to suggest before install DUO, please run the sudo apt-get update andS...
During recent Vulnerability assessment we have observed one vulnerability of Autocomplete attribute is not disabled on password fields which is allowing browser to get the password for local user. How we can address this in FMC. As per VA suggestion ...
Hello,I'm trying to migrate a new FDM (v7.2) to a new FMC (v7.2) using the latest version available of the migration tool (Firewall_Migration_Tool_v5.0.1-9282). It goes smoothly till I get to here : I can't select any option, I only have one acl, one...
Resolved! ASAv Upgrade
Is there any difference between upgrading a hardware ASA vs an ASAv deployed in Azure? Currently it's running older code and I want to upgrade to 9.18, but noticed that if I do a "sh flash" the current image isn't listed and if I do a "show asdm ima...
Hello,I noticed some weird lines left on the console of a Firepower appliance running ASA 9.16(2)14 today.ERROR: Invalid hostname: '' *; host ck4glj8u9e5sr[REDACTED]oast.site; ''INFO: A hostname must have letters or digits, and can have wild characte...
Resolved! Checking FMC PreFilter rule hit counts
Hello,How do I check the hit count for a rule in a PreFilter set please? thank you
Hello everybody,our customer has a Firepower2110 running a ASA-Image rel. 9.12(4)37.From our monitoring we got the error message: time difference: -272 secondsOn the ASA-OS I checked the time: de-nm-fw-ext-02/sec/act# show clock det 07:50:39.669 CEST...
Resolved! Cisco plans to replace ASA with FTD?
Dug into current Cisco documents, but can't find the answer to (hopefully) simple question - is Cisco planning to replace ASA with FTD software? Or we are going to have both OSes available for at least few more years?
Resolved! High Vulnerabilities UDP 53
Dear Experti have cisco FTD 2120, and on my firewall Tenable scan found "Firewall UDP Packet Source Port 53 Ruleset Bypass"But when i check on connection event from outside to inside, and inside to outside, UDP Port 53 and 1025 already blocked,but on...
This is the second one of the new ASA 55.5X series appliances where I have seen this issue:When I SHOW VERSION, I can see the serial number displayed.However, this does not match the serial number from the sticker affixed to the outside of the chassi...
Dear Cisco Community,I hope this message finds you well.I am currently working on configuring Wake on LAN on a Firepower 1000 series device and could use some guidance on the required steps, including NAT configuration. Here are the details of my ne...
Hello,In my network i have a Cisco Switch connected to Cisco VSS Switchs (Core) using EIGRP routing protocol. I want to integrate a Firewall ( Fortigate) between these two switchs and i can not change the routing protocol since i have many routes alr...
