Hello, We have a Virtual FMC with a 10 devices license and we currently manage 6 FTD devices (3 failover pairs) We are now thinking about deploy a second virtual FMC and move 2 devices over to the second FMC. Will I need an additional licens for this...
Dear Community,We are using ISE 3.XX which integrated with AD. After login to ISE web portal ( GUI ) login AD credentials + DUO.Kindly help to recommend any required information / document support / guideline to achieve it.Does DUO can configure both...
Has anyone else seen an excessive amount of ESP probes being sent to every public IP address . Makes me think there's a new exploit out. Check logs on the routers. Haven't ever in past 20 years seen this much probing using ESP packets. Just a head...
Hello, When trying to create a subdomain in FMC, I receive the following error I guess I get this error because some of the L2L tunnels are managed by the same FMC. So what would be the best way to work around this issue? Should I delete the L2L t...
I have a client who is transitioning from an ASA to an FTD. I used the conversion utility and most was fine. one thing it did was put three of the interfaces into sfp ports. the client doesn't have the module and need to use the copper ports. I c...
how to fetch the top talkers from fmc via rest api we have enabled the rest api from the fmc and we are trying to fetch the top talkers from postman with providing the auth-token and the domainUUID https://{{fmc_ip}}/api/fmc/v1/topTalker?count=10 But...
Greetings,We recently upgraded our FMC and a few of our FTDs to version 7.0.5. Since then, those FTDs have been blocking Microsoft Updates with the reason "File Resume Block" even though they're trusted. Has anyone else experienced this? We have a fe...
Hello, I have the following access list on my Cisco router. How can I edit the order. For example, if I want to add a deny "15 deny ip host 8.8.8.8 any", so that it's in between 10 and 20, how would I do that? Extended IP access list 10510 deny ip...
Greetings,Using the FMC or CLI, how can I find the computer name of the device that an end-user is connecting from when they use Anyconnect client for RA VPN?FMC & FTD 4112's = 7.2.5Secure Client w/Anyconnect = 5.0.0540Thanks!
I kinda will nilly setup a file\maleware policy based off a youtube video I seen without really understanding it. I was hoping someone can explain to me based on the screenshots how my setup is working as I haven't had any complaints about files bein...
Hi all I have a local ISP stating packet loss is due to customer oversubscribing the circuit. When I run continuous pings I see individual drops or packets here n there not like big blocks of request time outs or anything like that. The Provider says...
Hi ,in case i need to implement LLDP in Firepower 2140 how can i configure this?I can not find any lldp commands in interface menus.I see it is supported in FTD 1100 but i can not find ny relevant command in 2140 . Thanks,Ditter
hii use FTD 6.23 with FMC 6.4.0.4 , also i use splunk for syslog server .i have alot ACP rules , how do i find unused rules in my ACP ?
hii use FTD 4120 nowmy FTD version 6.2.3 with FMC 6.4.0.4 . i want upgrade them .i have alot rules in ACP.if i export of my access control policy can i import in new version ?before upgrade i checked it in emulation(EVE) , but i take a errorhow can ...
Hello all, I need some helps regarding Cisco ASA 5525X DNAT for icmp echo. Our organization want to use icmp echo reply from a public ip address which translated to internal server for some reason. I have no idea how to configure DNAT for icmp at ASA...
