I have an ASA-5508-X, running FTD, controlled by a vFMC device. Both are running 6.2.2 software. It is partly implemented.I want to set this up to serve Anyconnect clients, and I want SSL inspection. My understanding is that both of these things will...
Forum Posts
Dears, Please is there a way to restore ftd running config via cli.I mean copy the config into the device via from txt file, when the FMC wipes off the config from the FTD during initial configuration of the FTD on the FMC.
Dears, Please is there a way to restore cisco FTD running config via its cli.I mean to copy it into the ftd from a txt file.
If failover and data link goes down on active device.Failover will happen or not.
Still learning so bear with me. I have 2 VLANs so far. For vlan 1, I would like it use DNS server 1, and for Vlan 2, I would like it to use DNS server 2. Purpose being is Vlan 1 runs Active Directory so it needs to serve as the DNS for that netwo...
Resolved! Integrating FMC with ISE
Hi; I have a test lab and want to integrate FMC 6.2.2.81 with ISE 2.2 (patch 5). Also I have an Internal MS CA server and have imported the CA root certificate into ISE and FMC already. Now I want to generate CSR of FMC to get a FMC Server Certifica...
Resolved! Cisco FTD URL Filtering rule issues
Dear All, we've installed two 2130 FTDs in HA, managed with FMCv, we've configured a rule to block facebook & Youtube. on the Application tab we've selected HTTP & HTTPS plus on the URL tab we've added facebook.com & youtube.com urls. but the traff...
Resolved! New WAN outside interface doesn't work!
Hello,At my work we have buy new wan connection.The topology isSW_Core ----->FTD---->Outside wan1-2-3in the SW_Core are 3 vlan:WAN1 WAN2 WAN3 From the FTD, WAN1 ----> can ping wan1 gwWAN2 ---> can ping wan2 gwWAN3 ---> cannot ping wan3 gw.and i don'...
Hello, I have 2 x FPR2110-ASA-K9 and I'm trying to set up an active/standby state between them but unfortunately I face a lot of issues. Versions : Cisco Adaptive Security Appliance Software Version 9.8(2)Firepower Extensible Operating System Version...
Resolved! ISE cannot join Active directory
ISE cannot join AD. I got below error messages. One of them mentions "Unreachable Server List:", its right. the dns ip address already changed. but I do not know where i can change the ip address in ISE accordingly. If this is case, can you show wher...
Hi All,I need assistance to login using my FDM GUI. Output below are on waiting state. I can access firewall through CLI. Refer screenshot of the login page with error. root@rg-firepower-fw:/home/admin# pmtool status | grep -i waitingTSS_Daemon (norm...
I've got a FMCv in the lab and am attempting to upgrade from 7.2.0.1-12 to 7.2.1-40, however it is failing the upload from the workstation to the server. Product Updates, Upload Update, choose file and click upload. It goes through the motions and ...
Up until now, we have been using port forwarding with an SFTP server on our local network to share and receive files from partners and vendors (not very secure I know), but we have switched to a Cisco network with a firewall now. What is a recommende...
Hi everyone. Just a heads up that I am in over my head here so please bear with me. I was recently tasked with moving all of our FP1010 VPN tunnels away from our Cisco ASA and over to our Palo Alto firewall. I have successfully done so with five of t...
Resolved! Port security shows disabled in 9400
Hi,After configuring the port security on the interface and run Switch1#show port-security interface Te1/0/1 Port Security : Disabled Port Status : Secure-down Violation Mode : Restrict Aging Time ...
