Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...
Forum Posts
Hello,I am extremely irritated and frustrated with FDM and have no idea why anyone would want to manage the FTDs locally (I do know why but that's beyond the point). I am in the process of going through ACL rules in order to migrate away from the FDM...
I'm trying to connect my asa with ftd device to FMC, but Without success, All certificates, settings, ntp server, in order, without nat
I have an FTD which is able to ping 8.8.8.8 and internet but not able to ping system tools.cisco.com. Threat Defence Cloud error is showing. This FTD is using the same DNS policy as another which is able to ping tools.cisco.com
Resolved! Packet tracer fails ASA 1150 Firepower
HejI have a ASA 1150 firepower. I am trying to NAT that comes from Internet with dest tcp port 666 to be natted to 10.250.1.54 tcp port 666 Here is my configobject network OSCAR-ANYCONNECT-IP host 10.250.1.54 object service OSCAR-ANYCONNECT-PORTS s...
Resolved! FTD Migraton Uisng FMC
HiI dont have access to a lab so am asking a couple of questions'I want to migrate from one FTD to an HA pair, On the FMC thats is currently managing the single FTD there is a sub doamin for the FTD but on the new FMC where I want to migrate the FTD...
Hi, this might be a quick and easy answer for someone. Is it possible to upgrade individual firewall contexts within a 2130 virtual firewall and have them on different firmware? (running ASA). Or will they all get upgraded at once?Thanks.
Troubleshooting an access error with System Support Firewall-engine-debug and the traffic is hitting an allow rule but says "Pending Rule Order XXX" but never allows the traffic. Can someone explain what this is and how to fix it?
Is there a way to remove interface configuration quickly? I have some decommed ints which are being used by objects and policies. Or is there a way to identify quickly which objects/policies these are and remove them
Im coming from a sophos background and this is my first time using FTD. We have a /29 public ip range that in the Sophos firewall I would just create alias interfaces for each public ip and assign to the physical WAN interface. (then do nat / fw rul...
Cisco switch Catalyst 3850 48 Port PoE - Vulnerabilitycan any one help me to fix the issuetest#sh ip sshSSH Enabled - version 2.0Authentication methods:publickey,keyboard-interactive,passwordAuthentication Publickey Algorithms:x509v3-ssh-rsa,ssh-rsa,...
Resolved! Unable to register FTD to FMC
I'm having trouble adding FTD to FMC. Originally I was managing FTD locally with FDM, but lack of features got me moving to FMC. I ssh'd to FTD, and issues the command configure manager add <FMC IP> <Reg Key> and now it says 'pending' I went on to ...
Hello, I installed pam_radius on a red hat/linux server and configured it with ISE radius authentication. Was able to ssh to it with configured user on the radius server. But one issue is that the user name must be on both of the linux host and ISE a...
Does Firepower 2130 support site to site vpn to Goggle cloud with bgp routing option?? if so, how to do it?? Thanks.
Hi to all,i am running a pair of FTDs in HA. They run 7.2.8.Suddenly the backup pair started announcing that the SSE Service is down (please see attached png for FTD-2).The primary FTD (FTD-1) works OK and the SSE Service is user disabled as i have d...
We have two FTDs managed by an FMCv. both running 7.2.8. We are still using Snort 2 and will most likely go to Snort 3 after we are done upgrading to 7.4.2.We are thinking about a secondary network appliance that would possibly use snort as part of i...
