Hello,Currently we have AnyConnect deployed for our users to connect to the VPN which has no issues on this profile. We setup a new test AnyConnect Connection Profile which has a Group Policy configured to download Client Profile which is the managem...
Forum Posts
Dear Team, We are looking the stable FTD version can upgrade to fixed the vulnerability and ensure it cover suck of attack like VPN brute force...and prevent AD Account locked out even attacker known the legit AD user. Kindly share commend / good pra...
Resolved! FDM1120 Management Interface IP Address
Hi I have two cisco 1120 firepower running on (HA) i configure the Management ip on both FDM but i cant access ftd gui and also i cant ping able to the ftd. I can access the FDM by Reaching the default gateway on my inside on https:// and i give ma...
Good day. Please advise. I issued a certificate on the organization's server fpr2027-2. I installed it in FPR. But FPR continues to sign with its own certificate. Not the one I created, although mine is indicated.
Can I backup my FMC 1600 from cli.I have lost access to gui and there is no backup. Also can TAC restore VMSDB refusing to start?
ouch, posted in wrong forum.I have tried using the platform settings ICMP options to let windows traceroute out to the internet, failed.Another fp admin shared me these rules below. They work, but what else do I need to do to make them secure? These ...
Hi, can someone please advise how to access firepower 2120? can ping the mgmt ip, but when run https://firepower-mgmt-ip, then failed, can someone pls advise? thanks in advance!
Hi, I am trying to stretch layer 2 over a layer 3 network using VXLAN between two firepowers as the VTEPs. The outside interfaces have been configured as the VTEPs and I have subinterfaces for internal VLANs. I have created a VNI on both sides, howev...
Can you suggest best practice for it? Can you suggest some disadvantages of enabling it on internal or external interfaces?
We currently run an FMC environment that manages a pair of Firepower 2100 FTD appliances. WE recently upgraded the FMC to Version 7.4.2.1 from 7.4.2, and we were planning to do the same for the FTD, which are also running 7.4.2. However, now that t...
Hi all,I have the following configuration on AWS Cloud using Gateway load balancer:GWLB endpoint -> GWLB (geneve protocol) -> inside interface Cisco ASAv (version 9.22) -> outside interface Cisco ASAv -> InternetNVE 1 configuration:nve 1 encapsulatio...
Hello,I am trying to register a ASAv 9.18(4)53 to a Cisco SSM On-Prem Smart Licensing Server. On the ASA I get the following error:%ASA-6-120003: Call-Home is processing license event Smart Licensing. %ASA-6-725001: Starting SSL handshake with server...
hi allis there any way to send email notification if TID matches? I looked at Security Intelligence on correlation tab ,but could not find appropriate option to do that. What I want is that if some of the users entered a link which is observable of ...
802.1x on our network is working on the majority of VTCs, however, it seems that the Cisco Room Kit (EQ, Plus etc...) are not working. 802.1x Authentication enabled, use client cert enabled, capf cert pushed etc...A pcap on the switch port shows EAPO...
We have a setup with two FTDs running in High Availability (HA) on separate Firepower chassis in a Multi-Instance environment. I'm trying to create a new sub-interface on a port-channel from FMC, but the interface is not appearing in the FMC UI. A...
