Hello. Please see below..ASA5525# sh captcapture drop type asp-drop [Buffer Full - 524249 bytes]match ip host 172.16.2.2 host 8.8.8.8match ip host 172.16.3.3 host 8.8.8.8ASA5525# no capture drop type asp-drop allASA5525# sh captcapture drop type asp-...
I have a few FTDs that were managed by a pair of FMC 1000 in HA. I had to break the HA, re-ip the standby FMC and re-establish the HA. HA established, but getting the warning that the standby has few devices registered. When I go into the FTDs and...
i have this config on this router, can you guys help me out to find the issue?i want the vlan 20, 30,40 50 and 100 to communicate between each other and vlan 10, and 60 be restrictet and to have acces only to internet. Building configuration...Curre...
Hi, I'm new to Cisco FTD/FMCI want to know how to export members of object groups from FMC. How can I do his please? I want it in a format I can work with (copy and paste into documentation).ThanksMark
Hello,I have 2 site-to-site VPN's configured on my ASA 5506-x. They are meant to be failover to each other. If one goes down, the traffic should go through the other one, and vise versa. However, I've noticed most of the times that one of the tunnels...
We are using a time based ACL and have run into an issue. While the time based ACL will prevent new connections, it does not break the existing connections. Is there a way to automate clearing of existing connections at the same time the ACL takes ef...
Hello. Is it possible to create an ACL on Firepower which gets IP adresses to block from a network feed? We have a custom network feed, auto-populated on a given number of failed RA VPN login attempts in a time interval. The feed is on a RADIUS serve...
I'm getting a ton of log messages from public IP's trying to establish dmvpn connections to my 1111 router, and also UNKNOWN source addresses "show dmvpn". I tried an ACL and applying it to the tunnel interface, but that's not effective as I have no...
hi,I have classic annoying asdm 77% problem, latest ASDM version, run.bat memory settings tweaks does not help. Is there mybe unpublished solution for this. ASDM is running on win10 virtual machine. If I test it directly from laptop, it is flying. Bu...
I am working on a virtual FTD device that the memory keeps filling up. We have to reboot it every few weeks or else the device will become unstable because of high memory usage. Something that pulls from the Global Shared Pool is doing this. The ball...
Hey Cisco engineers (if any),Can you explain why ASA gives an error "ERROR: NAT unable to reserve ports" only when "asp rule-engine transactional-commit nat" is configured and only if "tmatch compile thread" is running (e.g. when device boots up or s...
I just deployed the FMCv in AWS and i am unable to login to the console. I keep getting "incorrect login" when i used admin as username and Admin123 as usernameI can't even get in via the web using the elastic IP i attached to the Interface Card.Than...
I've been experiencing a consistent issue with Cisco FMC Security Intelligence and I'm reaching out in hopes that someone might have encountered a similar problem and could provide some insights or potential solutions.Background:I have several source...
hi everyone, am trying to configure TID in cisco fmc but i faced issue with some sources "they stuck in parsing mode" so i apply this solution in fmc https://community.cisco.com/t5/cisco-bug-discussions/cscvd29174-allow-user-to-delete-tid-sources-whe...
Hello!I have an FTD 1010, running FMC 7.0.4-55. We are trying to access a website, https://tx.c2tinc.com/register, and it consistently times out when accessed from behind the FTD. When I filter the traffic to view the connection from my IP as the sou...
