Hi, is it possible to set up FMC High Availability with one FMCv and one FMC Hardware Appliances.I can't find any official statement that rules this out. kind regards Alex
Forum Posts
I am reading doc on Cisco FTD intrusion policy, can anyone explain to me what the difference is between Rule state and Rule action in Cisco FTD firewall intrusion policy?
Hi, I have a Site to Site VPN configuration on FTD 3110 version 7.6 managed by FMC. There is a subnet mentioned for protected network. Customer has a ask that they want to exclude some of the traffic to go via that tunnel if they are trying to reach ...
Resolved! How does BGP flowspec work
Hi AllI am aware of BGP flowspec, you have a server (flowspec controller) and clients which are the bgp neighbors to the controller?How does it actually work in practice? do all the ISP routers send netflow information to the controller and based on ...
I am trying to upgrade FXOS from 2.10 to 2.16 on 4100, I uploaded package as usual and clicked on upgrade. There was a message saying package is being unpacked and them a message about comaptibility with FTD instance running in the device. Accepted a...
Hey all, I currently have an HA pair of FTD 4145 running v7.6.2 When I run command "show failover state" I get a state of Sync Skipped - STANDBYCan anyone provide some clarification as to what this state means and why the sync was skipped? Has the H...
Resolved! FTD Route Based VPN question
HiI have a static Route Based VPN and am wondering if I create a loopback interface on the FTD is there a way to allow this IP over the VPN to test the VPN or generate some traffic from the FTD across the VPN ?? Thanks
We have Cisco FTD 2110s that are managed with FMC and we are trying to figure out how to block access to our remote access VPN by IP. We already have a geolocation block for Access Control in FMC. But, are we still not able to do geo-ip-based restric...
We receive this vulnerability on Cisco C9120AXI-E Access Point, Let me know if anyone has solution for this vulnerabilityCVE ID: CVE-2023-48795https://bst.cisco.com/bugsearch/bug/CSCwi61646?rfs=qvloginhttps://www.tenable.com/plugins/nessus/187315
Hi all,i Have FMCv on esxi version 7.2.4 connect with 2 FTD same version need to Replace the FMC to new one 1700 it`s version 7.4and after that i need to replace the two FTD with new ones 3100 serise -----i do this berfore but the FMC was 1600 to 170...
We have two Cisco FMC-4600v7.2.9 (build 44) running in HA is two separate geographical sites. Both were in HA and running perfectly. HA failover also working perfectly. But now it's showing HA Sync Failed. Please find the screenshots shown below.Plea...
I upgraded from 7.0.8.1-4 to 7.0.8.2-2, the pre-check was OK but I encountered the following error in the log file: EXPORT ERROR: The source parameter ("/var/cisco/deploy/sandbox/snort3-pkg/usr/local/sf/bin/snort-75-3.1.0.800-9") did not pass the Typ...
Hi AllI am currently looking into ddos protection services to protect some main internet links.What options are out there? I assume it would need to be further up the chain i.e in the ISP / Cloud ? Also, I see lots of them use BGP flowspec, what trig...
Hi, I'll shortly have to deploy a physical firepower of the 4100 family "4115". I know that the first MGMT interface showing up is for chassis FXOS purpuses. In Cisco videos I've seen that the management interface used for FTD "logical instance" is t...
I have some firewalls running FDM locally and not managed by an FMC that keep shunning specific IP Addresses. How do I configure the FTD to prevent these IP addresses from being shunned like you can in an ASA or with the FMC?
