We work with an organization coming in from an AWS EC2 instance trying to connect to an API we have onsite that's behind our Firepower FTD 2130 (7.4.2.1, managed by FMC) firewalls (there is an external/public NAT'd IP address it hits first, but that ...
Forum Posts
I am wanting to create a loopback interface on my FTD via FMC so it can be used a a health check for a clients VPN. I cannot see the option to create a loopback int?
In FMC, there is a easy way to block IPs that are hitting your Firewall, Right Click, Block IP. My understanding is that the IP is put in the Global-Block-List (Objects>Security Intelligence>Network Lists and Feeds). My question is, can you referenc...
After reimaging my Firepower 4110 and downloading the kickstart, system, and manager, I activated and configured all necessary IP's. I am still unable to open the Firepower Chassis Manager Web UI. Any suggestions or questions?
Hello ,Our company is embarking on a new project to install firewalls across hundreds of RTU Scada System sites. Currently, our infrastructure is predominantly Cisco, including switches and routers. There is a debate within our team: one group suppor...
Resolved! Access List Configuration on ASA
Hi All,I would to allow traffic from a client on the LAN ( 192.168.1.10) to google.com through an ASA version 9.22 . Considering that by default , the ASAs are set to allow traffic from Inside ( High Security Level - 100 ) to the outside / Inter...
Hello everybody, our customer has a Firepower 2130 running ASA OS rel. 9.14(4)24 with hundrets ofS2S tunnels. One of the tunnels cannot be initiated by the peer firewall (Meraki). The Firepowercan initiate the tunnel without problems. The customer th...
Our FMC keeps throwing in the same VPN status event "VPN tunnell between FWA/peerip/subnetX and FWB/peerip/subnetY is inactive due to to Deleted backup session" Firstly any idea what a backup session refers to? If its a VPN SA, well I've checked the ...
Hi to all,i have activated network discovery policy for some vlans that are in the inside network off the FTD.However when i add these vlans as part of the discovery process i get an FTD warning that you can see in the attached png.It is like that yo...
Resolved! FDM and NPS, test works but can't login
Hi, just trying to setup external RADIUS authentication to our Firepower 2110 boxes, we don't have FMC so it's the on box FDM for config. I've created a security group in AD and the specific policies in the NPS, with the attribute fdm.userrole.author...
I am a novice with Cisco so bare with me. When I am at work and connect my MAC BOOK to WiFi I can't connect to VPN. When I use my phone as a hot spot its fine. I am trying to look at the config to see how it is being blocked but not sure where to ...
We have tried to configure SNMP via Flexconfig, but not able to deploy script. shows: The template is not valid. Block list CLI error: snm-server host vdc x.x.x.x community xxx version 2c, snmp-server community xxx The FTD version is 7.4.2. It seems ...
Hello, I just tried to upgrade a customers FTD via FDM, but got the following error. Checking this bug - FDM upgrade failure due to HTTPS cert expired they mention we first need to break the H/A before generating and assign the new selfsigned certif...
hi all, Id like to know if the FMC can act as an NTP server for my internal servers/devices? Of so, how exaclty?Or it can only serve as a NTP server for FTD only? Appreciate any advise
Hi, I have migrated from two ASA's this evening into one FTD using VRs. VR1 has a primary SIP trunk on it and VR2 has a secondary SIP trunk. When testing external to internal phone systems calls rang once on the primary trunk but then would fail over...
