Hi All,I have few pairs of the NGFW and have recently change the passwords on them via the "configure user password admin" command..does anyone how to save the config/changes via CLI... or is auto saved? models are 2140 2130 2120 running 7.0.4Thank ...
Forum Posts
Hello,a vulnerability test detected "TCP Sequence Number Approximation Based Denial of Service" vulnerability (CVE-2004-0230) on a ASA 5506.The ASA should be running on 9.8(2).How do I find when (what firmware version) Cisco fixed the vulnerability?
UPDATE: I finally got it registered after deleting the pending manager in FTD and did a reboot of FTD as well...The only conclusion I got is I might have entered reg key incorrectly... ============ It is first time I am trying to register a FTD to CD...
Hi - I have a 5508 in my home lab with a firepower SFR - I recently upgraded it to version 7.0.4 - (had to do a re-image but thats another story ) however after adding the VDB (build 361) and latest Geo file. I am unable to deply any polices. In th...
Hi EveryoneWe have a pair of FPR4110 in our DC. I cant' login to the FXOS with any user and passwod. The GUI prompt me user and password. I even try SSH but another error rises.I try reloading chassis, upgrading chassis to suggested version problem ...
Planning on using FMT on a pair of ASA's running FPS. Question 1) When using the FMT and pushing the config to the new fmc which houses the new target FTD's. Does FMT then shutdown the interfaces on the source ASA to avoid ip conflicts - or do we hav...
I am just beginning with SecureX and I enabled on the FMC that manages 4 FTD1010's . However after enabling I only see the FMC and 2 out of the 4 managed FTDs in the Securex portal. I was wondering before I bother TAC on this if anyone knows a way to...
Good Day All, I'm a newbie with Cisco ASA , i have an issue after setting up a guest wifi for my organization.Here the TopoInternal user are on : 10.20.20.0/24 and Guest users are on : 192.168.1.0/24 , DMZ is : 10.30.30.0/24Internal users use interna...
Hello."ciscoasa(config)# failover interface ip folink 172.27.48.1 255.255.255.0 standby 172.27.48.2"The above is the Cisco literature config for a failover link for a one of two 5525s in a high-availability setup.What exactly is this link used for? W...
Resolved! FMC access to internet without nat
HiHow can FMC access cloud services (e.g. Cisco Smart License Center), without using management interface, that is used for communicating with devices like FTDs. In other words we want to use different interfaces for internet access and internal com...
Resolved! Firewall Policy
HiIs it possible to generate a report which shows our full FTD policy (Firewall Policy). ?? Thanks
HI ALL,I have recently setting up Cisco FTD and FMC , i am trying to create a two port channel one will be INSIDE and Another will be OUTSIDE, these port channel i added two interface each for inside and Outside. what i am trying to do to allow 8 vla...
Hello all,Currently trying to enable our Remote VPN users to route through our primary site and back out for specific subnets. We're using a FTD 2110 running 6.6.5 managed by an FMC running 6.6.5.2i added the desired subnets to the split-tunnel ACL a...
Hi,I have a question regarding the FMC minor upgrade from 6.6.5.2 to 6.7.0I've watched some videos, read procedures and find out that any pending deployments should be pushed prior the upgrade.I have two sites with ISP issues at the moment therefore ...
I have similar to the following - policy-map global_policyclass Class_FP sfr fail-open class-map Class_FP match any service-policy global_policy global If I want certain traffic to not go to the Firepower SFR what is the best way to achieve this? ...
