Hello team, so far we have been using 2 ISP providers for our local network. L3 was configured on ASA 5585. Now we are changing ASA with 2xFPR1230 with FTD 7.7 ISP_1 PPPOE connection configured on ASA with public IP static , will configure on L3 core...
When accessing a Firepower 4225 running ASA from a Windows 11 (Enterprise) workstation, after approx 20-30 minutes the window starts to lag. It eventually becomes unusable because of how laggy it is (ultimately forcing a close through task manager be...
Hi everyone, I’d like to share a troubleshooting experience during an upgrade from FTD 7.2.5.1 to 7.6.2 on a Firepower 4115 HA pair managed by FMC, and how we ultimately resolved a persistent sftunnel communication failure related to certificates. En...
We have following Setup:FTD1: Hub: Static VTI. WIth FMC in the local Network. FTD hast Static Public IP.FTD2: Spoke: FTD Behind a Cheap Router, Dynamic Public IP. Therefore configured Dynamic VTI. Default Route propagated through DHCP (Outside Interf...
I am using FTD 3110 managed by FMC 7.6. I have interfaces in production for Guest Access and I want to assign them to a separate Virtual Router to segregate the traffic for guest on routing level. What is the impact of that in the production? Will th...
Self encryption drives for FTD-2130, can anyone provide me details on what encryption is being used by Firewall FTD-2130.
I have a customer who has a single FMCv that is managing 4 x FTD 4115 appliances. The customer is using the FTD 4k's as follows: 1 HA pair for Firewall functionality only with Threat so config includes:- Interfaces, Static Routes, Objects, ACLs, NAT ...
Hi AllOn Firepower firewalls, how often does the IPS update?I can see timers for the "security intelligence" feeds, default 2 hours, but nothing for the intrusion side, I can see some settings under system > content updates, is this it? if so, it loo...
Hello, I am struggling to find how to view intrusion and security intelligence related events on cdFMC. It seems I can only view connection events. Here is another screenshot from an on-prem FMC, where you can select all sort of events, including in...
FMC Version 7.4.2.1 (build 30)I am trying to pull interface and networking configuration using the container ID as requested - domain ID is also set. Keep getting:Response: {"error": {"category": "FRAMEWORK","messages": [{"description": "No data foun...
I see this error NPU Accelerator Manager: FATAL - NPU Accelerator FAILED whenever I try to boot from .spa file. I am trying to re-image a firepower device and boot from .spa file. Does this indicate a hardware issue or some issue with the way the sof...
The University of the South Pacific (USP) operates one of the most geographically distributed higher-education networks globally, with campuses and learning centers spanning 12 Pacific nations and nearly 2,000 islands. This environment presents signi...
Hey, I've done some googling and searching through the community forums. But I cannot find anything explaining the version jump from 7.7 to 10.0 for Secure Firewall products. Does anyone have any links or comments on why Cisco is making this jump? ...
Hello guys , The case is to add a new entry in an already deployed Extended ACL(in a vpn tunnel), and this entry need to be somewhere in the middle of the ACL. Today i encountered the below.1) Clicked Add 2) Added the relevant sources & destinatio...
Hi dear Communities,I have configured Cisco FTD HA configuration on EVE-NG,As I understand Standby ip in Monitored Interface is important to work HA properly.But I have question If we have 2 or 3 ISP Provider how many Failure Limit should uje?
