Hi,I have configured IPSec VPN on the WAN interface. While scanning Public IP Pool from outside, the port udp 500 is also showing open on other public IPs of the router. I am not able to understand why port 500 is showing open on other public IPs alt...
Forum Posts
Resolved! ASA to Core switch routing best practice
Hi,Is it best practice to use static routes or a routing protocol between an ASA and core switch to be able to reach inside vlans? For example static route on the ASA would be Route inside 192.168.10.0 255.255.255.0 10.1.1.1 (L3 SVI on core switch) o...
hi this issue on VPN initiated between cisco asa and cisco rv 320 router the vpn tunnel is estableshed but this IKEV1 error appear in debud Apr 12 21:05:43 [IKEv1]Group = DefaultL2LGroup, IP = 177.8.169.134, Session is being torn down. Reason: crypt...
Upon system reboot, initialization, abort, etc., how can you confirm the Firepower (FTD software) fails to a secure state and if you must configure, how do you do it and/or what is the syntex?
Resolved! Issue While creating Flex Connect Object
Hello,I am using Cisco Firepower NGFW Virtual Image 7.0.5, and facing issue while configuring the SNMP via Flex Connect. Can any one tell what I am doing wrong in this.
Hi,i've recently started a configuration on a Cisco ASA 5508-X but, when i try to log in into the ASDM he says "unable to launch device manager from ...".I'm 100% sure that the IP address is correct, so i really don't know what to do now.Please help!
Hi, I do not find how to delete comment on ACP rule on FTD 2100. any help please ?
Resolved! FMC backup from KVM to VMware
Hi community, Is it possible to restore FMC(virtual) with the backup that is takin from KVM architecture to fresh FMC(virtual) running on VMware architecture. Thanks
Dears, We've ASA 5525 for network edge security and FTD 2130 for datacenter firewall functionality. We want these firewalls to send logs securely (encrypted) to the NFS servers we've on cloud. please advise how we can make that happen.
Hi All Although i have seen a similar question asked it did not completely align with my use case so apologies if it sounds the same. I have a deployment where a number of IDS rule are being triggered and dropped by inbound traffic to on prem webser...
Hello, I'm investigate the possibility to migrate ASA to FTD. The target is a Firepower 4115 device. Is there any specific requirements when the target is a chassis based device like 4100/9300 that also have separate FXOS configuration? I'm guessing...
Hi, I need your help. Packet Tracer asa 5506 has finished setting up object and object-group, and has set access-list and access-group, but packets heading to dmz are dropped. How can I solve this issue?
I'm about to start a software upgrade of Firepower 1010 from version 6.6.0 to 7.1.0. I understand it is allowed to run the direct upgrade. There two files I have:1) Cisco_FTD_SSP_FP1K_Patch-7.1.0.1-28.sh.REL2) Cisco_FTD_SSP_FP1K_Upgrade-7.1.0-90.sh.R...
Good day all,We have a Firepower implementation managed by a FMC. Servers in the environment are Windows 2019 and Linux on VMs. All the servers are behind Nexus 9K switches. Lastly, there are some servers behind F5 loadbalancers.The Network Discovery...
Hello Everyone.I need a little help discerning what devices to include in my Network Discovery policy.Please allow me to explain the topology.Our Firepower is protecting servers we have in an external data center. You could almost consider this a bra...
