Hello, I'm investigate the possibility to migrate ASA to FTD. The target is a Firepower 4115 device. Is there any specific requirements when the target is a chassis based device like 4100/9300 that also have separate FXOS configuration? I'm guessing...
Forum Posts
Hi, I need your help. Packet Tracer asa 5506 has finished setting up object and object-group, and has set access-list and access-group, but packets heading to dmz are dropped. How can I solve this issue?
I'm about to start a software upgrade of Firepower 1010 from version 6.6.0 to 7.1.0. I understand it is allowed to run the direct upgrade. There two files I have:1) Cisco_FTD_SSP_FP1K_Patch-7.1.0.1-28.sh.REL2) Cisco_FTD_SSP_FP1K_Upgrade-7.1.0-90.sh.R...
Good day all,We have a Firepower implementation managed by a FMC. Servers in the environment are Windows 2019 and Linux on VMs. All the servers are behind Nexus 9K switches. Lastly, there are some servers behind F5 loadbalancers.The Network Discovery...
Hello Everyone.I need a little help discerning what devices to include in my Network Discovery policy.Please allow me to explain the topology.Our Firepower is protecting servers we have in an external data center. You could almost consider this a bra...
Hello EveryoneWe are currently monitoring Firepower events in Splunk through the "Cisco Secure Firewall App for Splunk". Anyhow, we got the request to also monitor changes to Firepower rules and policies. Has anyone of you ever done this? Are these e...
When I use the system support diagnostic-cli command I don't see the configure terminal command, can these FTDs only be configured using the FTD GUI?
Hi,I have setup a home lab and I am unable to ping the inside address of my ASAv from the connection core switch. I think it is being blocked by the implicit rule but my attempts to add the correct ACL is not working..Switch#show ip int briefVlan500 ...
I have an ongoing issue where TCP traffic is being blocked in the reverse direction and it's happening too frequently for TCP timeout settings to come into play. This is an ASA-5516 running the newest version available for it: ASA 9.16(4)18.This affe...
Hello Is "Open VM Tools" supported on cisco ASAv?If it is, can you share the link of documentation page? I found post about installining VMware Tools on ASAv, but looking for same question about "Open VM Tools". > install VMWareTools in Cisco ASAV T...
Resolved! Replacing ASA 5525 with 1150
We have two ASA 5525-x firewalls managed using FMC and we're in the process of replacing them with two 1150 firewalls. Our vendor recommended to setup a completely new FMC for the new firewalls since the current FMC setup is quite behind on updates. ...
Resolved! FTD Smart Licensing Offline Activation
If I have to deploy FTD in an offline (no active internet) how can I activate the smart licenses? Is there any specific part number I can order during the procurement for offline license activation?
Hi I am trying to create an access list and I keep getting a syntax error on this command:access-list 1 deny 10.10.10.0 0.0.0.255 10.10.20.0 0.0.0.255 ^The error marker is on the start of...
I setup a couple of SLAs on an FTD v7.3 using FDM but they are in pending state and I can't see where to start them. Below are some show commands from the CLI. Any ideas? TIA route outside1 8.8.8.8 255.255.255.255 1.1.1.1 1route outside2 75.75.75.7...
I am testing new FTD1150's. There are no connections or traffic flowing through. But Snort is causing lots of high CPU usage alerts in FMC. TAC is saying to revert to Snort 2 and not use 3. This cannot be a real solution, can it?
