Trying to get a port forward setup for a server behind the firewall and having an issue getting it to work. The traffic appears to be dropping after touching the outside interface, even though an outside ACL is created for this traffic. Here are the ...
Forum Posts
I cannot deploy due to Cisco Client file that is on the FTD. It was fine before and I could deploy no problem. Now that Snort has an update I need to deploy but cannot due to error:The disk is (or was) full during extraction.WARNING: Unable to instal...
After an upgrade from 7.2.5 to 7.4 I lost the interface Eth0. Already added a new NIC on VM as an workaround, or even deleting a file and rebooting but no success rm -rf /etc/modprobe.d/blacklist-sfpacket.conf https://bst.cisco.com/bugsearch/bug/CSCw...
ISE 3.3.0 running on 3615 appliancesIOS-XE 17.9.5 on 9800-40 WLCsWe have some odd behaviour with a new hotspot portal. Everything up to authentication appears to be working correctly - user is prompted to sign in on connecting to the SSID, redirect i...
Resolved! Management Interface x Data Interfaces
Hello,I understood that connections to the FTD itself, cannot be filtered using FDM ACE only.So, I'm looking for the right option where I can ensure that the connections to manage FTD (web/ssh) are disable and not exposed to the internet (default). C...
Resolved! FTD Rules
I'm learning the basics of FTD (FP1010) and doing some tests. Using FDM, I create an ACE Rule to block ICMP (any type, any network). It’s the first rule on top of other policies, setup as Block and log. I can see the rule being triggered if I try to ...
Ok, I am in a pickle here. The security requirments for my Cisco firepower 2140 require a pre-login banner to be posted. As far as I can tell there is not place within the FDM to configure a banner, and when I do it via cli I get the error telling me...
Hi All, I have brought secure client licenses and wants to renew it on fmc. Do i need to just refresh authorization or anything else need to do
LAN:192.168.88.254/24ASA5505(branch)WAN:60.0.0.1------Internet------WAN:59.0.0.1CP1555(HQ)LAN:192.168.169.254/24Cisco Adaptive Security Appliance Software Version 9.2(3)Checkpoint 1500 Appliance Version R81.10.10 (996002945)Here's partial running con...
I have a use case where I need to deploy FTDv (FTDv100) in a HA pair utilizing two physical servers with the ESXi (7.0.3 - Dell Version) hypervisor, one FTDv 7.4 instance on each. Following the Cisco deployment guide, I am attempting to leverage SR-I...
Resolved! Default Action Block - Log
Hi !I'm start learning FTD (FP1010) and trying to figure out why I can't see external blocked SYN packets on FDM web interface (Events Tab). They are visible only on syslog messages, like this example: 07-07-2025 10:29:14 Local4.Error 192.168.0.1 Jul...
Resolved! CISCO FIREWALL 3105
Hello We just got a cisco FIREWALL FPR3105-NGFW-K9 and very exited but we have failed to get the an ip address through DHCP even after connection to he INSIDE PORT. As a mater of fact the port is not lighting at all but the out side port is lighting ...
Hello,I have set up a FTD managed by cdFMC for remote access VPN. For authentication I use SAML with Azure AD as an IdP. The authentication itself is working fine, but the user identity of the session viewed in FMC has "Discovered Identities" as it's...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Hi All, A critical vulnerability, CVE-2025-32463 with CVSS score of 9.3 reflecting its high risk, has been discovered and affecting Sudo in Linux OS. This vulnerability allows attackers or users to exploit sudo's -R (or --chroot) option to execute ar...
