I am trying to limit SSH access to the management interface on FTDv firewalls via FMC Platform settings or flexconfig but it doesn't appear to be working.I originally tried to restrict access through adding SSH Access platform settings only from IP a...
Forum Posts
Packet Tracer 8.2.2 executable is no where to be found on the new platform, and the video in ITN shows the old legacy resources.. Also, if your students have a new ARM MacBookPro - they will not be able to install packet tracer.
From Firewall to Insight Engine: Unlocking the Power of FTD Connection Events It's a busy day. Your NOC is flooded with tickets: "Application X is slow." "Users can't connect." "Everything is timing out." Your dashboards show green, yet somethin...
Based on my recent experience, we had to patch our FTDs from 7.6.2 to 7.6.4 for the HA environment for multiple sites. DHCP relay was not working. Solution: Had to switch the Active
Resolved! FTD PBR Question
HiCan anyone answer this question please, Do I need a default route when using PBR on FTD ? we have a static default route that points out of one Interface and have set up PBR to force traffic ingressing on a certain Interface down a tunnel, I have ...
Resolved! Deploying FMCv to VMware
I'm considering upgrading to the new FMC/FTD 10.x, so thought I would try deploying another FMCv to see what the upgrade experience was before actually doing my production instances.However, I cannot get the OVF to deploy onto vSphere 8. I've tried b...
Resolved! FPR1120 EOL
Hi, I am not able to find anything related to FPR1120 EOL and EOS, however all open source links are redirecting for 2100.Please, if someone can help me on this?
Hi!I already posted my question in Configure NetFlow in FMC - Cisco Community but I´m not sure how visible it is there, therefor this repost.So far, I´m using one Platform settings policy for all FTDs as there´s a lot of shared similar configuration....
Hello Team, We want to remove disabled rules from firewall and before that want to take backup of "disabled" rules only. is there better we can achieve this. I know you can generate report of policy from policy section of FMC too, but that includes b...
Hello, guys Could you please help me with two questions? I have installed anyconnect plus license (AC-PLS-1YR-25-S) on a hardware ASA 5512x, is it possible to move this license to ASAv in the future? if I will buy ASAv5 (L-ASAV5S-K9=) and in the futu...
I need help configuring PBR (Policy-Based Routing) on Cisco FMC/FTD in a scenario without change a exist default route and using two WAN links with ECMP.My goal is:To use PBR on the inside interface to steer traffic to two different next-hops (two IS...
I am working on deploying a new ASAv and it's only using the Management and I can't figure this out on how to use the outside interface for traffic. When I try to add a static route using an IP in the outside interface range it gives an error conflic...
Could anyone explain me the packet flow especially with those nat statements and how crypto acl is checked. Chatgpt isn't helping a lot. I do understand how twice nat works from asa1 but un-nat at asa2 is still something I couldn't get. Also how cryp...
Hello everyone i want to configure identity policy on FMC with Active Directory Kerberos, on guide written The Realm you select must be configured with an AD Join Username and AD Join Password to perform Kerberos captive portal active authentication....
Resolved! FTD BGP Question
HiIf I have a route based VPN configured on my FTD and I want to run BGP with the peer device then what IP address do I use for the peering is it the peers VTI IP or the peers interface IP address please.?? Thanks
