Hello,I've been reading through Cisco's site to site documentation and wanted to confirm there's no possible way for a site to site vpn to have both tunnels active? Seems you can only have active/passive. FMC 7.0 using FTD 2100 series. Thanks in adva...
Hello So on an inside server (192.168.5.42) I am running an NGINX Web-Server which absolutely needs to be on Port 80 and 443. My FPR1010 has, by default, https access via 443, so when I connect to x.x.x.182 (WAN) (which connects to 192.168.5.42) on h...
Dear Team , I have found this error in one FMC SETUP Deployment Cancelled due to Firepower Mangement Center restart. Retry Deployment. Only normal changes we have made in FMC . WE have raised case with cisco they did troubleshoot issue. And Last WE f...
Hello, I have a customer with a SFR module on their ASA 5525. After the latest VDB update (361) they ran out of memory, resulting in traffic interruption. This is the warning they see in their FMC: Configuration Memory Allocation - Resource utilizati...
Hi everyone,I'm trying to figure out if it's possible to provide the blocking page when a virus/malware is blocked, from the tests I've carried out it would seem not, the blocking page is displayed only with the URL filtering feature.So I wanted to a...
I am currently trying to set up RESTCONF on one of my lab CUBEs. For this i need the HTTPS server, and for that i needed a valid certificate on the router. Cisco IOS XE Software, Version 17.03.04abootflash:isr4300-universalk9.17.03.04a.SPA.bin So i c...
Hey! Currently working on FTD 1120 which is managed by FDM, and my query is. FDM-6.6.1-91 VDB-336.0 - Configured Two ISP links on FDM with sla monitor. -Basic configuration one access-list for Lan users to access internet and Nat policy which is in a...
I've spent the last hour or so trying to find documentation for configuring SNMP via FDM. We initially did this via flexconfig, but I'm thinking that when we upgraded to 7.0, SNMP was directly via the GUI. I can see it's configured, but there is noth...
The company I work for re-located their ASA 5510 to a new office location with a new static IP assigned to us from our ISP. If I update our NAT rules with this new static IP do I need to run the clear xlate command or should I just add new NAT rules?...
Hello,we relocated our Asa 5510 to a new office location and were given a new static IP and router from Comcast. I changed all of the previous rules and interfaces in the ASDM to match the new static IP that was given to us. I can see all of our serv...
Hi I have two FTD 2130 (High Availability) and FMC 1600 I need to change the CLI server DNS on my high availability FTD 2130 (CLI DNS for management) no change DNS GUI on my FMC the older DNS server no works and now don't have resolution name I need...
Hi all, We are not able to access the firepower chassis manager GUI. Though we can ping and ssh the firepower management IP address but not able to access the firepower chassis manager. any help on the same would be highly appreciated. badly stuc...
Hello,Please, from your knowledge and skills, what is the best way for blocking social and porno on a LAN?A freind recommend using OpenDNS, what is your recommendations please?
Hi all,I'm trying to understand the configurations of SNMP v3. From Cisco's "Software Configuration Guide" > Configuring Simple Network Management Protocol > Configuring SNMP Groups and Users, Step 5, in Purpose column:"Enter the SNMP version number ...
Hey all I am getting intrusion events as shown in the below screenshot. These are known DNS servers and trusted. Can anyone tell me what is going on here and how I should try to remediate this??? I am at a loss
