Hi.We currently have a Cisco FMC operating out of Datacenter (DC1) running on version 6.4.0.14 (Build 67) and now there is a requirement to migrate this off the current ESX environment (to be decommissioned) to another DC's ESX environment. The Cisco...
I have virtual FMC and two FTD 2120 boxes. Version is 7.0.5. I want to see Interface statistics in Health Monitoring. But there is a statement "Throughput module is disabled in the health policy". I was looking in health policy for this two FTD, but ...
Hello, I'm trying to get passive identity to work with FMC, but I'm a bit stuck. So far I have a working PXGrid connection between FMC and ISE and I have also configured the Realm and an identity policy in FMC. All those things seems to work and I ca...
Hello, I came across some similar threads and none seem to solve this problem. We are facing the below error on FMC 6.4.0.10 since almost 2 months ago: Here are the expired Cisco AnyConnect Apex licenses shown in the Smart Account, although we are n...
Hello,Can anyone point me to a known working method of staging a FPR1010 offsite and then shipping to site preconfigured to be managed remotely either with FMC at a different site or CDO? This site will not be using the built-in mgmt. port, so everyt...
Hi,I am facing some NAT config issues; the scenario is as follows:I have a vm server(3.20) in AZurDC wants to access to URLs with another entity via ISP tunnel. I have a single NAT ip address(60.43) which is being natted on the FMC with NAT policy 1 ...
Good day! At work i have cisco as 5506 (ver 9.6(1)) actually configration is working. i have 3 differnece inside network (2 of thm vlans) and 2 isp ( one isp is now out of service). at vlan 10.103.2.0 int 2.1 is gateway for this network and confiured...
Say I have a pair of FTD 4k with two container instances running (v7.2). Each instance is running HA between the two physical appliances and each instance has etherchannel made of two interfaces. From what I read, the individual interfaces can be ad...
It is my understanding that using "crypto key generate rsa" will generate two keys for use with SSH. One is a private key stored in NVRAM which cannot be accessed, and the other key is a public key. I believe this command should generate one general...
Hello All,I'm doing a lab in my GNS3 just built ASA active and standby which is no issues but when i try to access the outside ip address which is the ISP i cannot ping it from inside interface but there is no proble from outside interface.I though i...
I have a Cisco Firepower 2110 and would like to have a backup internet connection. I don't want it to be a redundant system, I basically just want it as a fail safe in case our primary internet connection fails. Example, to be clear: If Ethernet1/...
This is an interface object that I am trying to delete. When I do, it fails stating that it is in use in a "Filter". It is not a prefilter or a url filter. I can not for the life of me find the filter that it is referring to so that I can remove th...
Has anyone re image the FMC from a bootable DVD before? How did it go? Thank you
I understand that since the FTD User Agent has been deprecated the new FTD user identity options are either ISE (with at least the Advantage license) or ISE-PIC. Does it matter which option you choose if you are managing the FTD via the Cloud-Deliver...
Is it worth climbing the Cisco ladder for security or is it worth focusing on the cloud based certifications ladders such as the AWS ? I personally am interested in pen testing. maybe forensics. And still love my hardware . But alas outdated or dead ...
