Hi, We see "Encrypted Visibility Engine" (EVE) on the FTD is supposed to replace the SSL Decryption feature. Our requirement is to fully detect and block malware over encrypted traffic (HTTPS). At the present time (May 2023) is safe to use EVE inst...
Forum Posts
Dear community,I'm trying to automate Cisco FMC (v6.2) using Ansible tower (v2.9.27), But I have problems with starting the connection,known That I want to use "HTTP API" connection, so may you help me understand the steps to build this connection,Th...
Hello everybody, I upgraded our customer's ASA5555 cluster from 9.14(3)15 ---> 9.14(4)22. The upgrade procedure was without issues.After the upgrade the customer called me and told me that all AnyConnectlogins were impossible.I compared the configura...
Hi to all,I've try to import an ASA configuration to firepower 1140 using the firepower migration tool 4.0.I can upload the ASA configuration correctly, but when try to connect to firepower the migration tool show an error like it:Bllocked Invalid FM...
Hi,I have a Cisco ASA 5520 and connected with a cisco switch. Am working cluster Master/Slave which is working well and looks fine without any issue (UP).Problem is that my Port-Channel is not coming up on switch and ASA both sides the summery of eth...
We placed our devices behind our asa 5505 and after it I noticed that zabbix is pinging every devices behind the asa with loss where is the problem? Asa can't skip icmp without loss?
Hello All,Let me start off with saying that I am a beginner and trying to learn the fundamentals. I have a basic config on my C921 router that suits my needs. I am turning to the topic of network security and trying to learn how to configure a good s...
Hello All,I am currently facing an issue while trying to configure a new FP 4110. Unfortunately, I am unable to find any options for configuring routing, and it seems that the available options are incomplete.To provide a better understanding of the ...
Resolved! FTD VTI tunnels limit
I use FTD (FPR1010) for VTI tunnels to remote sites. When I have 10 tunnels, they are all stable, however, as soon as I add new tunnel it works but flopping periodically. As more new tunnels are added, they flop more frequently. At the same time, the...
Hello,We need to audit the network traffic and also apply some rule based on user or groups. Is there a way that a switch or a wireless controller can provide a user to ip mapping table? this need to be "auth-level", the data need to be unique and fr...
Hello, I have a security system that both Internal and External users can log into. It also has a redirect inside that will point to the Public IP address of the camera servers. The directions instruct that I need to re-route the internal users bac...
Hi, After deploying FTDv on AWS, immediately we see Data Plane memory utilization of 78%. This stays constant whether there is traffic or no traffic. Spec : 4 Cores, 8GB RAM. Is this normal? Seen this on FTDv7.1 and FTDv7.2.4.
Hello everybody,our customer uses FMCv 7.0.5 and a Firepower 1120 running rel. 7.0.5.The monitoring reported the following: CRITICAL - mempool MEMPOOL_HEAPCACHE_0_1 usage is 94.41%, mempool DP System memory_1 usage is 53.29% mempool Snort System memo...
Recently, I am trying to migrate AAA accounting setting of cisco firewall from ASA to FTD. In old ASA, I have some commands like.aaa accounting command PRIVILEGE 15 RADIUSaaa accounting ssh console RADIUSaaa accounting serial console RADIUSaaa accoun...
Curently we are using FMCV to manage 4 FTD 2130. Now the renawl time appoarching. But i did not get information about the part number for Fmc license and support renwal. So any one who can help me on the renwal and support psrt number to prepare RFP ...
