FMC Version 7.4.2.1 (build 30)I am trying to pull interface and networking configuration using the container ID as requested - domain ID is also set. Keep getting:Response: {"error": {"category": "FRAMEWORK","messages": [{"description": "No data foun...
Forum Posts
I see this error NPU Accelerator Manager: FATAL - NPU Accelerator FAILED whenever I try to boot from .spa file. I am trying to re-image a firepower device and boot from .spa file. Does this indicate a hardware issue or some issue with the way the sof...
The University of the South Pacific (USP) operates one of the most geographically distributed higher-education networks globally, with campuses and learning centers spanning 12 Pacific nations and nearly 2,000 islands. This environment presents signi...
Hey, I've done some googling and searching through the community forums. But I cannot find anything explaining the version jump from 7.7 to 10.0 for Secure Firewall products. Does anyone have any links or comments on why Cisco is making this jump? ...
Hello guys , The case is to add a new entry in an already deployed Extended ACL(in a vpn tunnel), and this entry need to be somewhere in the middle of the ACL. Today i encountered the below.1) Clicked Add 2) Added the relevant sources & destinatio...
Resolved! FTD HA Reconfiguration via FMC
Hi dear Communities,I have configured Cisco FTD HA configuration on EVE-NG,As I understand Standby ip in Monitored Interface is important to work HA properly.But I have question If we have 2 or 3 ISP Provider how many Failure Limit should uje?
I am looking at the Cisco FTD platform logs, and we are trying to convert the logs to OCSF format. We want to focus on security relevant events, according to the guide there are only 5 syslog messages which are security relevant - https://www.cisco.c...
I have two Cisco Firepower 2100 firewalls that will connect to two ISP routers (non-Cisco). These are separate internet circuits from the same ISP. The connections between the firewalls and the ISP routers will pass through a pair of stacked Catalyst...
Is it really expected that innocent cluster members are kicked out of the cluster after split-brain is resolved and one of cluster control units leave the cluster, or it's a joke of Cisco developers?In the below example unit-2-1 became control unit d...
I would like to change the hostname of two FirePower 4100 systems which are in HA active/passive mode between the two systems on the installed ASA 9.7 code. The ASA hostname was changed just fine. When I try to change the FirePower chassis hostname v...
Resolved! ASA to FTD (FDM) Migration Support
Hi Team,Can we migrate configuration from an ASA to an FTD FPR-1150 that is managed by FDM?Does the Firewall Migration Tool support migration to FDM, or is it only supported for FMC ????ASA model and version : 5525 / 9.14 FTD : FPR-1150
Hi allCan anyone tell me the following Can firewalls and IPS stop DDOS attacks? I see they can do basic protection, syn floods etc but they arent specifically designed to do so? is this correct?Where would we best place these ddos devices, infront of...
Resolved! ASAv to Azure AD Authentication issue
Hello allI am struggling with something on our Azure setup.I have created public load balancer with two ASAv's behind it running active/standby HA.I am fairly sure that when I set them up and configured HA, that it was working OK. But a few weeks lat...
Resolved! Failover link
Hi team, Is it failover and stateful link in Cisco Fw high availability configuration sufficient for configuration and connection synchronization between active and passive devices ?
We are running Virtual FMCs pair (FMCv) and currently we have license for managing 10 devices (SF-FMC-VMW-10-K9). However, we need to increase the license as our managed devices are more than 10. My questions is that can we add another 10 devices li...
