Hello guys, we need to disable tls 1.0 and 1.1 and move to tls 1.2, does this change impact all the active client to site vpn or the new parameter will be negotiated only for the new connections?There will be downtime for this changing or it is full...
Forum Posts
Hi,I want to know if its possible to directly connect a firewall (in our case a checkpoint) to a cisco ASA ?The reason I want to do this is to overcome an architecture challenge and by directly connecting the two firewalls together and allowing traff...
Resolved! ASA FirePOWER services vs FTD
Is the SFR module on an 5516X ASA considered an FTD? Reason I ask is that I have FMCv v7.0.1 managing ASA 9.16 devices that have V7.01 Firepower code installed. The option to upgrade to Snort3 seems to be available but documentation says Snort3 is on...
Resolved! ASA SFR - Show module shows SFR init
In the ASA failover setup, primary>Active firewall the show module shows the SFR status. as init state not UP state. I got the same result. after reload the SFR module #sw-module module sfr reload. #show module unable to read details from module sfr ...
Resolved! Copying files from FTD flash to local PC
We have two 1140 FTDs that we manage with a FMCv. Both are running version 7.0.5. This may sound like a simple question but I cant seem to figure it out. I created an eem event and after it ran it left a log file in the flash drive of the FTD it ran ...
Hi There,I got an issue after migrating the firewall from Cisco ASA 5545 to 5525.1 of 20 tenants can't communicate to Public Network but can still communicate between Private Network,but the Public Interface (Gi0/0.5) can ping to the Public Network.i...
Resolved! secure firewall 3105 clustering
is the throughput in cisco secure firewall 3105 doubled (20Gbps)when using clustering of two
Hi Guys,Getting this log on ASA while I'm trying to ping from switch that attached to ASA and new ASA interface. Could you please advise?Thanks Nik
Hello All, We have Cisco FTD pair configured with HA. Recently we have updated the FTD with 7.0.5 version with this we have also upgraded snort-2 to snort-3 (as per recommendation). Both the requirement has been completed properly. But .. Post than a...
Resolved! FMC/FTD Upgrade matrix question
Hisee image belowI was planning on upgrading to 7.05 which looks now to be cisco reccomended version, but after double checking the matrix it seems that thats not an option as if I upgrade FMC to 7.05 it wont be able to manage the FTD's, version 7.2 ...
Looks URL filtering was enabled on a policy with different categories like Gambling blocked but unfortunately few of them are still accessible. I gone through some Cisco document, it's mentioned that https inspection for url filtering only works for ...
Our environment consists of two identical FPR-1140's running ASA version 9.14. We have them set up for failover, and everything works properly if one of the devices were to fail. However, every time this happens it seems to bring the management line ...
I'm trying to upgrade my customer firepower 1150 device from 7.0.5 to 7.2.4 version and upgrade fails. it says: ftd onbox upgrade failed.
Hi All,FPR1120, Can this device be used as an ASA itself? Currently we do not have license to CDO( to migrate the ASA config to FTD. However, we are in plan of purchasing it. In the meanwhile we need it to be used as ASA till we get the license sorte...
Will two FPR-1010s connect to each other with no issues if one of the FPRs does not use the command listed below? Also, I'm going to apply the High Availability config individually to both devices first and connect them to each other afterwards. Anyo...
