I'm working on setting up a pair of FTDs to replace existing ASAs. FTDs and FMC are running 7.2.5. The ASAs have the following timers configured for OSPF: router ospf 1 timers pacing flood 5 timers pacing retransmission 60 timers throttle spf 10 1...
Forum Posts
Hey everyone! I have a weird situation going on with my failover and I just wanted to make sure the best practice for the HA Pair of a FTD. I have two outside interfaces with the same IP and I think when they have the same IP it broke the HA pair. Q...
Firepower 1010 (ASA-Image): ASDM does not work anymore after upgrade Hello everybody, I upgraded the Firepower 1010 (ASA-Image) from 9.14(4) auf 9.18(3)56using the ASDM and the upgrade worked without issues. Directly after the upgrade I still could o...
Hi,We used the migration tool to move from ASA5525s to FPR3110s and the tool appended "no-lookup" to most of the rules but not all. If anyone knows what this designation implies, as well as it's absence, I would greatly appreciate knowing. Thanks.
Hi,I am trying to create a VLAN containing our Guest Wifi network - and only that.The device with mac 0000.1111.2222 is the access point.So far I have:vlan 56 name guest-wifiNext I want to configure an interface. At the moment, it is configured to Gi...
Hello folks, What are the best practices to fix local subnet (RFC 1918) URLs that get classified as uncategorized. Is there a better way than adding them to a URL list as a feed or as a URL group. The exercise being that I want to identify them a...
Hi all,I need some assistance with ALC'sSo my goal is to have an ACL that blocks access to the switches web gui BUT allows an ISE URL redirection for our guest users.In order for the redirect we need to have the http and http secure-server active,Thi...
Resolved! FMC protocol (n)
Hi. Can anyone tell me what the number in brackets in FMC policy editor means in the protocol drop down field? thanks
i have Cisco ASA5516-X Threat Defense with ios version (75) Version 6.2.3.17 (Build 30) and i intended to upgrade to 7.0.1 but i have to go 1st through 6.4.0 so i upgraded the ASA to isco ASA5516-X Threat Defense (75) Version 6.4.0 (Build 102) then t...
Hi All,I'm getting "packet 1420 bytes greater than effective mtu 1398" PFA, when trying to send an SMTP traffic via IPSEC VPN, Could someone please advice on this?Device: CISCO ASA 5525
i want configure Ether channel in FPR1140 and this FTD manage by FDM so it is possible
Hi Team, Kindly need your suggestion/help if anyone experienced like this In my office, we've FMCv and Manage 2 Appliance Firepower 1120 with HA configuration But, last week, Our HDD server (that hosting FMCv), is corrupt Fortunately, there's no imp...
Dear Cisco Community,I hope this message finds you well.I am currently working on configuring Wake on LAN on a Firepower 1000 series device and could use some guidance on the required steps, including NAT configuration. Here are the details of my ne...
Hello,Referring cisco document on NAT i would like to know why the acl direction is "dmz_acl in interface dmz" rather than "dmz_acl out interface dmz" as the communication is from DMZ to INSIDE object network dns-server host 192.168.0.53!access-list ...
Hey everyone, Just wondering if anyone knows where to send the Netflow collector on a cloud-based wireless controller (such as Meraki for example). Would we send it to an on-premise Netflow collector? If it is on-premise, would the Netflow be encry...
