Hi All,We are migrating from ASA to FTD and planning to use migration tool, I came through that in 7.2 version of FMC and FTD even VPN(both site to site and AnyConnect VPN) configs will be auto-converted too. I am mostly concerned from ssl certifica...
Forum Posts
Hi All,I have set up SSL decryption for most traffic with a few exceptions and it is working well, however when trying to sign in from Azure CLI i am getting the following error:HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max ret...
Resolved! Open UDP Ports 123/161/500
Hallo,I have a few C1100 routers that seem to have some UDP ports open. Unless I disable the protocols e.g. NTP, the port are as below after an nmap scan:123/udp open ntp161/udp open snmp500/udp open isakmpOur SP says that there is currecntly no r...
[Updated] Hello everyone, Case 1: I'm curious about the capabilities of a firewall that operates without a license. Additionally, do these capabilities vary between different firewall series when no license is present? --------- At CCW I've added thi...
Hello!I need a command with which I can check the OpenSSL version in IOS and IOS XE.For Catalyst switches and ASR routers.On my Nexus devices I either use the bash shell or I use the "ssh -v source-ip" command. Both of those aren't working for IOS / ...
Hello Everyone.I need the MIB and OID from FTD and FMC for monitoring them.Any one have a link to get the MIB and OID from FTD and FMC?Thank you.
Greetings everyone, We have recently upgraded our FMC and 2 managed FTDs from version 6.4.0.10 to version 7.0.5, and then migrated the IPS engine from Snort 2 to Snort 3. (upgrade and Snort 3 migration completed successfully). After Snort 3 migration...
I need secure-login in firepower chassis manager CLI How Can I avoid contact Cisco tac and get response of Challende String? I don't have contract Thank you Tom FP-MI-LAB# secure-login Challenge String (Please copy everything between the asterisk ...
The one Access Point Migrated is complaining: - "Uplink IP address in conflict with another device - " - indicating a duplicate IP Address AP MAC Address = e455.a82d.4048 IP address = 172.10.10.5 (handed out via the FTD DHCP pool). When we look at...
Hi!I am using a virtual FMC 6.4.0 in order to do a migration from ASA. As you know, once you migrate the ASA policy package it creates you a rule for each ACE which extremely increases the number of rules in the FMC (in my case up to 20.000 rules).Ok...
is it support Geodancing to isco ASA ftd 5555x ?
I purchased an ASA 5508 from AMAZON but unfortunately seems to be out of the warranty period. All I am trying to manage the appliance by installing ASDM and it has proven to be a classic nightmare. I have configured the unit as documented and connec...
class-map global-classmatch access-list global_mpcclass-map outside_policy1match access-list outside_policyclass-map class_sip_tcpmatch port tcp eq sipclass-map outside_policymatch access-list outside_policyclass-map testing!policy-map type inspect h...
Hi,Im using an ASA5585.If I have a PC_B outside the asa and PC_A inside the asa, PC_A can ping PC_B. If I disconnect PC_B from its connection, PC_A will begin to have incomplete pings to PC_B. This is normal. However if I reconnect PC_B to the networ...
Resolved! Configuring CRL FTD FDM
Using version v7.0.5 FDM (or any 7x) , is it possible to reference a certificate revocation List(CRL)? For use with RA VPN (anyconnect / Secure Client). I know this is possible using FMC, however is this possible using FDM.
