Hi, I have a standalone FMC and will configure HA while creating another FMC. Plan is to make the 2nd FMC as Secondary. Question is , at intended Secondary FMC do I need to Import the policy from Intended Primary Node before I do the FMC HA Config or...
Forum Posts
I have a firepower 4100 series setup as an HA pair that I just inherited. I am not familiar with this device. I noticed today that I can SSH into the primary FTD, but not the secondary. Is this normal? I just want to make sure there isn't anything wr...
Hello, Do you know of any display issues when using ASDM? The display takes a long time to appear. These delays are observed only when in Appliance mode (even without configuration). On the other hand, no slowness is observed when we are in platfor...
Greetings Kenna Community team,I am investigating about how to obtain the risk score reduction for one specific vulnerability. I mean how can I know how much my risk score is being reduced if a vulnerability is solved.I know that we have top fixes, a...
Resolved! Pre-sales concerns related to firewall
Hi folks, I'm wondering if there is any website where I can check the end-of-life and end-of-support for a specific firewall. Thanks,
We changed our asa5505 to fpr1010 and noticed that fpr1010 doesn't give snmp answers for memory usageCISCO-MEMORY-POOL-MIB::ciscoMemoryPoolUsed = No Such Object available on this agent at this OIDMemory MIB1.3.6.1.4.1.9.9.48.1.1.1.5. ciscoMemoryP...
I am looking to use a 4110 for a central ingress firewall, to connect to DMZ's. This is lab related so don't freak out. I have a sever with a web page in each DMZ and each DMZ is IP'd to a 10.0.X.X schema with the X being the number of the DMZ, IE 10...
Hello,Is there any possibilities to assign a secondary ip address on a physical address on FPR3k (FMC managed)?i.e:Ethernet1/10 ip add 3.3.3.3/24Ethernet1/10 ip add 3.3.3.4/24 secondaryEthernet1/10 ip add 3.3.3.5/24 secondaryI know it is possible to ...
Hey folks,Very simple diagram Cisco Umbrella / internet || ||FRP3k x2 (Active-Active) || ||450 routeurs (MPLS network) 10.0.0.0/8Since Cisco Umbrella limits IPsec VPNs to 250Mp...
Sign up now for a CX workshop at Cisco Live! Meet with Cisco services solution leads and subject matter experts for deep-level discussions and insights. Choose your preferred topic and follow the steps to complete the registration. Join one of our CX...
Dear Team Members,Greeting to all!Currently I'm facing with the port forwarding issues for Port 80, I have two wan interface primary is VPN and secondary is OUTSIDE. I set to VPN interface default route administrative value to 1 and secondary default...
Resolved! Teardown TCP connection
Hello Team,I'm working as SOC analyst, I'm analyzing CISCO devices and i get one alert regarding Teardown TCP connection from CISCO FTD. <182>May 24 2023 03:53:45 FTDP : %FTD-6-302014: Teardown TCP connection 259297712 for WAN_A:95.214.27.136/43134 t...
Hi Everyone,I am struggling with the ASA configuration with 2 Subinterfaces and am not able to ping from one vlan host to another vlan host, I haven't applied any ACLs and NAT as am not testing it with the internet.int gi0/0.10vlan 10nameif VLAN10sec...
We just upgrade to FMC v7.0.1 and afterwards we seeing an issue with a Health Alert that we cannot clear. The following is showing for one of our FTDs. At the interfaces shown are disabled interfaces on the FTD that are not in use which they should b...
Resolved! NAT Translation in Cisco FMC
Hello all, I'm using cisco FMC 4600 to manage FTD cluster and I need to get NAT statistics and events. As which internal IPs have been translated to a certain NAT IP address. Is there a way to do that in FMC?Thank you, Hadeel
