Hi, I tried to change the GUI Admin password of our FMC 1000 but it always give me this error: "An error has occurred when updating user account information in the firmware for Lights-Out Management access. See log files for more details about possib...
Forum Posts
Resolved! Access DMZ from VPN
Hello,I'm using ASA version 9.1, and ASDM version 7.1.When connecting from my VPN using AnyConnect VPN client, I can access computers in my LAN without any issue.I cannot access anything on the DMZ.My lan is 172.20.20.xMy DMZ is 172.21.20.xand my VPN...
Hi; I have two FMC 2500 on HA; planning upgrade from 6.4.0-13 to 6.6.1-91. My process: 1 backup. 2 check ntp and space on disk. 3 upload file on active and standby 4 pause HA synchronization 5 run readiness on both devices, active and standby 6 updat...
Hi Guys, I would like to know how to calculate max concurrent session given only the total number of users and total number of devices? I need to size my firewall. Thank you
Resolved! FMC Question
HISo we have an FMC 1000 which is currently managing x1 FTD I have been sent a replacment FD and cant add to the FMC as I keep getting the below error, I was considering de-registering FMC and then generating a new token on SSM and trying to re-regis...
Hey all,We're configuring a firewall for a client. On our internet facing outside we're wanting to configure connection rules to block basically everything except our clients, they connect via a remote access VPN, using Anyconnect, and using a site-t...
Hi all: I am having an issue with a 1:1 NAT on an FTD. I have two FTDs (both managed by an FMC), and they both have 1:1 NATs. The NATs are working on one FTD, but not on the other. They have different flavors of internet, and the problem is relate...
I can't find the exact answer to this and have read mixed opinions. We used to use Firepower with ASA. The previous network engineer simply left the default value for both the HOME_NET and EXTERNAL_NET variables (which is "any.") I took over the posi...
HelloI am surprised by the lack of documentation on this. Currently I cannot login to SSH on my firepower 1010 appliance through data interface or management interface. Although both are set to allow https and ssh, only the management interface wil...
I have a question related to the interface configuration options for Smart Software Manager On-Prem.In the User Guide I find the following:SSM On Prem supports up to four interfaces that can be configured and used for user management, product registr...
Dears,Please am trying to make cisco FTD to send user administrative logs to a syslog server and also via emails to system administrator.I mean logs that has to do with the following but not limited to:-user log on to the FTD cli-Upgrades done on the...
Hi guys, Our current setup is we get users to login to cisco anyconnect with their AD username and password then they get an alert to allow the connection via Microsoft Authenticator.This is working fine however occasionally we have a situation where...
Today I reviewed my network discovery logs and started manually inputting some pending servers. I discovered that there are multiple ways to key in a windows server, with vastly different vulnerability recommendations. I use these recommendations in ...
Resolved! Static NAT issue (outside to inside)
Hi, need help on my CME-PABX that's connect to the external SIP server for external calls. The external SIP server is pointing to public ip (202.x.x.1) as per diagram below. I need to map this to our CME (10.10.130.1) in order to reach the external S...
Hi,We are managing our FTD devices via FMC. for one of policy attached to one of IPS I get below warning."This rule uses an interface object that contains no defined object"I get this warning every time i deploy something from FMC to FTD devices, any...
