I am trying to delete a port object that appears as "unused" but when I hit the delete key the FMC says it's in use in a "filter". I checked pre-filters, ACP, flex objects and SSL policy and can't find where it's being used. I recognize the name(...
howdy folkstoday started to get FMC Alerts circa 3:50pm EST:SF Health Monitor Alert, severity warning - Unable to communicate with dynamic analysis cloud cannot PING/Tracert to fmc.api.threatgrid.com , behind FW or also via phoneany status on whassup...
Hey,I have problem, where I can't create new object in FDM, I don't know why but the error shows only when creating a new network object or a group.FDM is working on 7.3.0-69 versionReboots didn't help
Hello,I have a cluster of Firepower 3120 in HA (active/passive). In two different tech room. They are managed by FMC. Devices are in version 7.3.I have 2 ISP (ISP1 and ISP2) with 1Gbps link each and i set up an ECMP zone for loadbalancing the traffic...
Hi, I am working on decommissioning FTD . I am keep getting confused between FTD and Chassis. Also if someone have already done similar work, please guide me. Cisco model 2130
Does anyone know if and where there are NAT log files on the FTD? I have been going through most of the log files in expert mode but have not been able to find anything related to NAT yet. @Marvin Rhoads @MHM Cisco World @Rob Ingram @Sheraz.Salim H...
Hi community,Does anybody know why cluster "enable" CLI not saved to startup-config on ASA/Firepower? Presumably, FTD is affected too.To upgrade FXOS+ASA on Firepower 4100 we typically disable clustering before the upgrade to prevent ASA slave units ...
After the Ransomware attack, our FMC VM was encrypted. The backup was unfortunately corrupted as well.What are the methods to restore FMC from a working Firepower or something like that? Or should we do a clean installation of FMC?
I've setup the FMC (6.5.0.4) to use LDAP and that is working, but when i try to get LDAPS setup for authentication to the FMC itself it fails. On the section when you choose the certificate I'm able to import the root CA, but when I go to test I get...
What would be recommended? How do I adjust this? 4Jun 08 202306:22:33733100 [ Scanning] drop rate-1 exceeded. Current burst rate is 61 per second, max configured rate is 10; Current average rate is 133 per second, max configured rate is 5; Cumulat...
We have a Geo block list in place which allows for US based IP's to connect to our devices. The rule is not recognizing a US based IP as being a US IP even though the logs show it should, because of this the rule drops the connection for this single ...
OK, been looking at ASA FW Rules and we have a LOT of rules with Zero Hits. Can I safely remove these? Doing a system cleanup and hit counters have not been cleared for a very long time.
Hi All,I need some assistance trying to see what the actual hits are on a specific ruleset on a ASA firewall.We created a rule required by the server engineers for specific services and ports required. However they were still not able to access or lo...
Hello. Upgrade the OS of WLC,IP changed. howeverthe corresponding log appears and802.1x authentication is not possible. WLC Model : 5520 WLC OS : 8.8.130.0 -> 8.10.185.0 ISE Version : 2.6.0.156 Patch 8
Hi, Having issues with devices not able to change their device time to the correct timezone. NTP is synced from FMC, and Timezone configured on device platform policy is UTC+2. Mainly need to fix this to fix timestamps in syslog. Everything is runnin...
