Network Security

Hi,Is it possible without downtime to change the access vlan on the 2 port-channels used for the ASA cluster control links ? I tried earlier on the switch with int range po 11, po 12 -  switchport access vlan [new vlan] and the cluster broked. Maybe ...

Today, I'm working on the High Availability of Firepower Management Center in eve-ng. I've already done FTD HA which was quite easy to configure and verify, but HA for FMC is tough to get. I followed cisco's official documentation. The issue I found ...

Hello all.I'm trying to enroll a certificate to the FTD managed by FMC via EST protocol, but... upon creating a certificate object with EST fields filled in and attaching it to the FTD, i get an error in the FMC:crypto ca authenticate _TestEST nointe...

Hi All,Posting this for everyone's awareness.I encounter odd issue which Cisco TAC tried to troubleshoot before I had to redeploy the firewall for different setup. I was running FPR1010 running FTD version 7.6.4.This firewall was onboarded into cdFMC...

ASA is not forwarding RST packet even when sequence number is correct.Src ---- ASA --- DEST : when src is sending RST packet to DEST it does shows up on ASA ingress interface but not in egress interface so the conn is being RST by src but dest thinks...

I'm currently standing up a Cisco SSM On-Prem but have hit a bit of an issue regarding creating and adding a browser TLS certificate.  Our (private) Certificate Authority have very strict rules on what can and can't be in the CSR, unfortunately the S...

I have two FTDs that have been offline for more than a year, and now I can deploy the configuration to change the IP address of the WAN interface to connect to the internet. I now have internet on site, but from a different ISP.

Have FPR1010 that connects to c2960 and drops SSL when user tries to launch program.  Switch shows one class-map with errors and User states getting errors.  "The error SSL connect error (openssl ssl_connect: ssl_error_syscall) indicates that the TLS...

2 nodes in the cluster with 2x9500s. Is it possible to have each node connect to separate 9500s?

Hello, we are using FMC version 7.4.6. I am trying to activate the Dynamic Attributes Connector on FMC (Integration ->Dynamic Attributes Connector -> enabled ). After a long wait, Verifying images passed with a warning. Downloading the connector and ...

Hello community,I am experiencing an intermittent connectivity issue in an environment with Cisco ASA firewalls in failover mode and Nexus 5K switches configured with vPC. I would appreciate any insights or confirmation of possible root cause scenari...

Hello,This is a completely isolated classified network in which Firepower firewalls will be managed through Cisco FMC.My question is whether there are capabilities for Cisco FMC to operate and function without an internet connection, specifically whe...

I've now been through two TAC techs who have been unable to resolve this issue. I am unable to get these new HP printers to profile to the "HP-Printer" profile or beyond. They are remaining in the "HP-Device" profile which is the parent profile to "H...

Hello,We are currently troubleshooting an issue where the ASA is not sending syslog messages to a server that resides across a VTI tunnel.At the moment, the ASA does not appear to support configuring a syslog destination using a VTI interface (i.e., ...