Does anyone know what would cause a Nexus port-channel (vpc) to be in suspected mode against Cisco FirePOWER 2110 series appliance? The interface status shows that for the port-channel shows that it is in suspected mode (with no LACP PDUs). It is be...
Forum Posts
Hi,We have two FMC:s (7.0.4) in a HA setup.Last week we just get access denide on our standby FMC. We can't reach the web interface either.The sync between our FMC:s seems to work but we om the FMC (standby) the mojo_server is down and we get warning...
Good afternoon, We were running a speedtest performance testing and were getting only 500MB download and 360MB upload on a 1GB download/1GB upload going through the ASA. The is behind a Checkpoint firewall. I am just curious what would cause such as...
FSM Filed Error on ACI
Resolved! FTD Secure Syslog
Can anyone provide documentation on configuring Secure Syslog from FTD's.Documentation is limited from Cisco.
Hello everyone,I have recently setup the two new switches. These two switches are mainly for replacing the existing/old switches that holds the two ASA firewalls. I have created a Trunk port connecting the old and the new switches. I have set the pri...
I have a Firepower 2100 firewall managed by FMC 7.x. It is set up in transparent mode with a bridge group (BG) between ports 1/1 and port 1/2. In my test bed I have an outside computer 192.168.1.1 and an inside computer 192.168.1.2. Access rule...
Hi, I'm trying to determine if I can update and strengthen weak SSL/TLS on an EOS ASA5585-SSP-20 that's running Version 9.1(4)5 code on it? The current SSL config shows the following: ssl server-version tlsv1-only
Is there a way to rate limit the traffic generated by the FTD itself? Example: if VoIP is going through the Firewall, can we prioritize VoIP over the events traffic generated by the FTD itself? I'm familiar with the QoS feature of FTD which permit b...
Under the HTTPS configuration of the FMC I enabled require client certificate without having said certificate. I am now unable to log into the FMC via the GUI. Is there a way to back that setting out from the CLI?
Hi allJust need a clarification regarding that the NGFW contains the IDS engine or just the threat management.Coz i am just confused whether the firewall has IDS and threat management or just threat management. Thanks for your help in advance
Hi Is there a way I can change user timezone in cd FMC like I can do it in on premise FMC's? thanks
Resolved! FMC CPU keeps ramping up
I have installed FMC on an ESXI server, and it has been fine for a few months. Now over the last 2 months the CPU’s will spike and FMC becomes un-reachable. The FMC is not being used in full production yet, so it doesn't have a lot of traffic. I have...
HelloASA5525# show conn all1. Does this command give current data, or does it need to be refreshed?2. If I "#clear conn" , will that terminate all active connections on the ASA?Thank you.
Appliance Model : Cisco ASA 5508-XFirepower Status : Not used ASA Version : 9.16.4I am having trouble using NTP to synchronize time on port 123. I have set up a custom NTP server that listens to port 122, and I have verified that the synchronization ...
