Dears, I have an FTD at a remote site and managed using FDM.A site to site vpn is configured between FTD at site and ASA at HO.Tunnel is working fine and I can access and reach all IPs in remote site.Concern here is I am unable to access FDM/FTD’s ...
Forum Posts
Configuration does not sync with standby box and it shows Failed. I can able to ping state and failover link from active to standby and standby to active.show failover stateState Last Failure Reason Date/TimeThis host - PrimaryActive NoneOther host -...
FMANFP-6-IPACCESSLOGP log message displays IP addresses in reverse order. The Cisco bug ID CSCvn40315 identifies this bug.The explanation references an outgoing network package that may have been affected by this bug, indicating that an IP address o...
I have what I thought was going to be relatively easy task. Our syslog server logs more than 20,000 login attempts in 48 hours to log in using a variety of root, admin, administrator and random email accounts. While all have been prevented it may onl...
I'm attempting to migrate a merged configuration from two ASA's that just contains the objects, object-groups, ACP and two interfaces using the latest FMT 4.0-7965 windows tool. In my lab (ESXi 7.0) I built an FMCv running the same version as product...
Resolved! downgrade to Snort v2 on FTD HA pair
We have several FTD HA pairs. One set has a single FTD running Snort 3. And one set has both FTDs running Snort 3. We've decided to downgrade all FTDs to Snort 2. Is it possible/advisable to downgrade a single FTD to Snort 2 while leaving the other m...
My problem is traffic broadcast from 2 Microsoft Windows PC one connected to port 1/2 and another connected to port 1/4The Windows application communicates using these IPs 224.0.0.22 IGMPv3 and 225.0.3.15:5602 UDP and these packets do not pass betwe...
Resolved! FTD Virtual Router
Hiif I create a new user defined Virtual Router on FTD 2100, can I still use the exsisting ACP for the interfaces in the new Virtual Router ?, so ACP for both gloabal virtual Router and user defined Virtual Router, and also create security groups and...
Resolved! ASA 5500x version query
Hicurrently on 9.8Hello another ASA 5500x question, so no interim upgrade required, but target version because it as the x in brackets does this mean I can upgrade to any version in the major version.?? and also whats the best/safest practice for thi...
Hi everyone, I have my cisco ASA 5516 with version 9.7 (1) 4. I am trying to configure the ASA for BGP Authentication, but when I try to enter the TCP map range 19, It says that this range is not valid as shown in the attachment of this post. How can...
Hello.GIVEN:Packet1 tries to reach server2 (72.16.139.5) that lives remotely through a L2L tunnel. The packet travels 4 hops through the LAN to an ASA-5525.ASA-5525# sh routeGateway of last resort is 1.1.1.1 to network 0.0.0.0S* 0.0.0.0 0.0.0.0 [1/0]...
I am trying to build an ipsec tunnel in IOS XE 17.6.3 using hostname but I get a keyring not found error. Is there a way to do this without having to use the IP? Non-working: crypto ikev2 keyring zscaler-keyringpeer zscaler-peerhostname sea1-vpn.zsca...
I was advised by TAC to upgrade some v7.0.1 2140's to v7.1 to bypass some Snort2+3 Bugs.This obviously involved upgrading the appliance FMC 1600 to v7.1 first, which went fine, but now when I open a Policy, the search bar function does not work. By t...
Hello i am running FMC 7.2.0 with VDB 361. After the VDB was updated to 361, we had an issue with a URL that was previously working. This URL domain was being blocked under a Policy Rule for Application blocking on Category "Burnbook". This URL has n...
we want to upgrade our FMC from 7.0.2 to 7.0.5. FMC is showing in health that smart license usage is out of compliance as we are using extra threat license on one ftd. is there any issue if we go for upgradation or we can go for upgradation. please h...
